PHP vulnerabilties PHP2Shell

Support
4

New patched PHP versions are now available in Local for all OSs

  • No Local update is needed. The latest Local version has not changed: https://localwp.com/releases/
  • Create sites with the latest PHP by choosing one of these versions in the Custom Environment page:
    • 8.2.35
    • 8.3.36
    • 8.4.27
    • 8.5.12
  • Update existing Local sites by clicking “Update” in the PHP row on the site info screen.

@Henkk No patches for earlier versions are available from the PHP foundation as they are end of life: PHP: Supported Versions. Local does not expose your site to the internet by default, so the risk of running older versions locally is lower than public-facing production sites, but it is good practice to use the newest versions.

Create a site with a custom PHP version

Choose "custom" environment and select the PHP version
Choose "custom" environment and select the PHP version1736×970 40.4 KB

Update an existing site to a new PHP version

Click "update" next to "PHP version" in site info
Click "update" next to "PHP version" in site info800×744 45.9 KB

Other release notes

  • macOS 14 is the minimum version required for Intel builds of PHP.