PHP 8.4.23 (security release) not yet available in CloudPanel repository

[jero051118]

CloudPanel version(s) affected

2.5.4

Description

Helllo ## Description

PHP 8.4.23 was officially released upstream on July 2, 2026, and includes
security fixes — notably a memory corruption vulnerability in
openssl_encrypt() with the AES-WRAP-PAD mode, a Phar directory
protection bypass, and some Opcache issues.

The CloudPanel PHP repository (d17k9fuiwb52nc.cloudfront.net) still
only offers 8.4.22-1+clp-bookworm as of today, with no newer candidate
available.

Environment

• OS: Debian 12 (Bookworm)
• CloudPanel version: 2.5.4
• PHP version installed: 8.4.22-1+clp-bookworm

Question

Is there an ETA for the 8.4.23 build to be published in the CloudPanel
repository, given this is a security release? Thanks!

How to reproduce

Steps to reproduce

sudo apt update
apt-cache policy php8.4

### Possible Solution

_No response_

### Additional Context

_No response_