Updated 10/21 - 14:53 UTC
Laravel Cloud
We’ve temporarily paused deployments across all Laravel Cloud regions while we carry out critical platform maintenance for today’s PHP security release. We’re currently applying the patched PHP versions to all running applications automatically, so no action or redeployment is required on your part. Your applications will continue to run as normal; only new deployments are affected.
We’ll post regular updates here and will let you know as soon as deployments resume. During this window, our Support Team won’t be able to help with deployment-related requests.
Deployments will resume once the patched images are live. We will email you as soon as that happens. All deployments from that point on will use the patched images.
No redeployment is required. In our previous email, we asked you to be ready to redeploy your applications. That step is no longer needed. While we still encourage you to remain vigilant throughout the day, upon the security release we will patch your running applications directly by replacing the PHP version with the updated release. Your applications will stay online, and no action is needed on your part while we do this.
The Node.js security release is now available. We are updating our base images with the patched version of Node.js, so all deployments from that point on will be patched.
Laravel Forge
We’re aware that some users are experiencing slower response times. Our engineering team is actively scaling capacity to keep up.
If SSH to your server is available please see these docs for updating your PHP version via SSH, bypassing the Forge dashboard.
Thank you for your patience. We’ll share updates here as things improve.
Upstream PHP PPAs on Ubuntu have not received the patch yet. At the time of this post, updating your PHP version in Forge will not receive a patched version.
We will post another update when patched versions have landed in the PPA and give green light to patch your servers.
If you’re running PHP 8.2, 8.3, 8.4, or 8.5, patched versions are available. To update, go to your server in Forge and click “Update PHP.” We’ll send another email as soon as the patches are confirmed live. If you are unable to update your server promptly, you should power it down until the update can be applied.
If you’re running PHP 8.0 or 8.1, the PHP team will not be issuing patches for these versions. We strongly recommend upgrading to PHP 8.2 or later as soon as possible.
If your servers run Node.js, you will need to update it yourself on each server.
Laravel Vapor
We will automatically redeploy your Vapor applications running on PHP 8.3+ with a native runtime. No action is required on your part.
If your applications use a custom or Docker image runtime, you will need to redeploy them yourself. Rebuild your image so it uses the patched PHP version, then redeploy.
If you are running PHP 7, no security patches will be released for that version. You should update your applications to PHP 8.3+ immediately.
Laravel Envoyer
Envoyer is currently unavailable for scheduled maintenance.
During this window, you won’t be able to access the Envoyer dashboard or API, or run deployments. Your applications and servers will keep running as normal.
We’re upgrading the servers that run Envoyer so we can apply the patched version of PHP from today’s security release.
If you need to deploy during this window, you’ll need another way to do it. With today’s PHP security release, some of you may need to update and redeploy your applications quickly.
We’ll email you once maintenance is complete.
This post will be updated frequently. Check back for updates.