My Zenphoto site is running on PHP 8.4.26.
Consequently, I am affected by the new PHP security vulnerabilities discovered this week.
While waiting for my hosting provider to update PHP, I have the option to switch to version 8.5.12, which is not affected by these two new vulnerabilities.
Is Zenphoto compatible with PHP 8.5?
Thanks in advance for your clarification!
Zenphoto 1.6.8 should work generally with 8.5 already but there might be some notices here and there. There are fixes for all supported versions:
- 8.5.12
- 8.4.27
- 8.3.36
- 8.2.35
So it is probably only a matter of time your host will also apply those.
https://www.php.net/archive/2026.php#2026-10-21-5
Heh.. my galleries (v1.5.7) are running on PHP version 7.4.33. Luckily my webhost backported the patch to that version. My other sites are on PHP 8.1.34 which was also patched. My webhost did remove PHP versions 7.2 and 7.3 from their shared servers. In my case they patched PHP without actually changing the version numbers.
I need to work on getting everything to PHP 8.2.X at some point.
Zenphoto 1.5.7 is of course very outdated. Just to mention it again ;-) Yes, most hosts even provided patches to PHP versions that are not officially supported anymore. You should not get to PHP 8.2 because its support ends in about two months. I strongely recommend to update your Zenphoto and switch to 8.4 instead.