Patched PHP packages are now available for servers on Ubuntu 22.04 and 24.04: PHP 8.2, 8.3, 8.4 or 8.5: go to your server in Forge and click “Update PHP”. Do this for each server. Updates may take longer than usual to finish. If that fails, update PHP over SSH using our guide: https://laravel.com/forge/docs/knowledge-base/php-security-release-october-2026 Ubuntu 20.04 or older: you won’t be able to update PHP. Create a new server on a supported Ubuntu version and move your sites to it. Until then, we recommend powering down the old server. PHP 8.0 or 8.1: no patch is available. Please upgrade to PHP 8.2 or later as soon as possible. Node.js: remember to update it yourself on each server.
Posted Oct 21, 2026 - 21:40 UTC
Update
For servers running Ubuntu 26, the latest PHP patch is available and can be deployed. Please follow our published guide: https://laravel.com/forge/docs/knowledge-base/php-security-release-october-2026 For servers running on older versions, the patch is becoming available right now (but availability is still not 100% covered across all older versions). We will keep everyone updated as we are following the progress here closely.
Posted Oct 21, 2026 - 18:06 UTC
Update
PHP has been updated across Forge servers. We are currently working through a high volume of queued update jobs - if your server has not yet received the update, it will shortly.
Upstream Launchpad PPAs have not yet received patched PHP release.
Posted Oct 21, 2026 - 17:03 UTC
Monitoring
We’re aware that servers running Ubuntu 22.04 and 24.04 may not yet receive the latest PHP 8.x updates when updating PHP through Forge. This is because the updated packages haven’t been published to the upstream repository Forge installs PHP from. This is outside Forge’s control, and there’s no action needed on your part. We’re monitoring the repository closely and will post an update here as soon as the new versions are available.