PHP 8.1 and older no longer receive updates from the PHP project, and PHP 8.2 reaches end of life on December 31, 2026. For the older branches, the PHP security team has published source backports for PHP 7.4, 8.0, and 8.1 to help people building from source or waiting on a vendor.

Versions which cannot be updated, should notice in the documentation, that there is a CVE which will affect system and if patches are not maintained by the distro used.