PHP Vulnerability Responses by Company

LGM-OS

Global hosting
Aliases / services
Luis García Menéndez / LGM-OS
Official website
https://lgm-os.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

LGM-OS application catalogue

Response status
Patched apps updated; unpatched apps flagged
Response information checked
2026-10-27 Rechecked: 2026-10-27

Application updates including PHP2Shell fixes began with 3.12.3 on October 23. Version 3.12.5 updated 196 apps; 3.12.6 fixed 33 apps that still installed older images despite showing the new version. Version 3.12.7 moved 28 apps to upstream images with October Node.js or PHP fixes and strengthened warnings for unpatched apps.

Scope: The3.15.2 changelog changes automatic patches to notify rather than automatically restart Docker, Samba or the panel. Check application-card guidance and running state; installed packages alone do not prove a restart.

What users should do

Update LGM-OS and review warnings on application cards. Update older images from their cards and follow upstream availability for applications still awaiting fixes.

Official service URL

Source URLs

  1. LGM-OS: PHP vulnerability responsehttps://lgm-os.com/it/novedades.html?bandera=1Response evidence
Related official sources
  1. LGM-OS: PHP vulnerability responseOfficial notice
  2. LGM-OS: Operator informationOfficial information directory

Comments