Package & Service Updates
October 21, 2026
This release updates PHP to 8.3.36 and nginx to 1.30.6. Both fix security vulnerabilities, and the PHP update fixes critical vulnerabilities in PHP itself. Update your control server and every hypervisor as soon as possible. See the security advisory for details of the vulnerabilities.
Updated Packages
| Package | Version | Systems | Distribution | Arch | Security | Notes |
|---|---|---|---|---|---|---|
| vf-php8 | 8.3.36 | Control, Hypervisor | Debian 13, Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 10, RHEL 9, RHEL 8 | x86_64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.3.36 |
| vf-system-php8 | 8.3.36 | Hypervisor | Debian 13, Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 10, RHEL 9, RHEL 8 | x86_64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.3.36 |
| vf-nginx | 1.30.6 | Control, Hypervisor | Debian 13, Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 10, RHEL 9, RHEL 8 | x86_64 | 🚨 | https://nginx.org/en/security_advisories.html |
| vf-php8 | 8.3.36 | Hypervisor | Debian 13, Debian 12, RHEL 10 | AArch64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.3.36 |
| vf-system-php8 | 8.3.36 | Hypervisor | Debian 13, Debian 12, RHEL 10 | AArch64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.3.36 |
| vf-nginx | 1.30.6 | Control, Hypervisor | Debian 13, Debian 12, RHEL 10 | AArch64 | 🚨 | https://nginx.org/en/security_advisories.html |
How to Update
Put VirtFusion into Maintenance Mode first, so that no tasks are running while the services restart. Then run the commands for your base distribution as root in SSH, on the control server and on every hypervisor.
- Debian/Ubuntu
- RHEL
For Debian 11, Debian 12, Debian 13, Ubuntu 22.04 and Ubuntu 24.04, on x86_64 and AArch64.
Control
apt-get update -y && apt-get install --only-upgrade vf-nginx vf-php8 -y
vfcli-ctrl app:restart --services=queue,fpm,web
Hypervisor
apt-get update -y && apt-get install --only-upgrade vf-nginx vf-php8 vf-system-php8 -y
vfcli-hv app:restart --services=queue,system-fpm,fpm,web
Check the installed versions
dpkg-query -W vf-nginx vf-php8 vf-system-php8
vf-php8 and vf-system-php8 should show 8.3.36, and vf-nginx should show 1.30.6. A control server has no
vf-system-php8.
For RHEL 8, 9 and 10, and the distributions built from them, such as AlmaLinux and Rocky Linux, on x86_64 and AArch64.
Control
dnf makecache -y && dnf update vf-nginx vf-php8 -y
vfcli-ctrl app:restart --services=queue,fpm,web
Hypervisor
dnf makecache -y && dnf update vf-nginx vf-php8 vf-system-php8 -y
vfcli-hv app:restart --services=queue,system-fpm,fpm,web
Check the installed versions
rpm -q vf-nginx vf-php8 vf-system-php8
vf-php8 and vf-system-php8 should show 8.3.36, and vf-nginx should show 1.30.6. A control server has no
vf-system-php8.
Take VirtFusion out of Maintenance Mode once every system has been updated.
Learn more about how to update your system packages
December 27, 2025
Updated Packages
| Package | Version | Systems | Distribution | Arch | Security | Notes |
|---|---|---|---|---|---|---|
| vf-php8 | 8.3.29 | Control, Hypervisor | Debian 13, Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 9, RHEL 8 | x86_64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.3.29 |
| vf-system-php8 | 8.3.29 | Hypervisor | Debian 13, Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 9, RHEL 8 | x86_64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.3.29 |
June 10, 2025
Updated Packages
| Package | Version | Systems | Distribution | Arch | Security | Notes |
|---|---|---|---|---|---|---|
| vf-php8 | 8.2.28 | Control, Hypervisor | Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 9, RHEL 8 | x86_64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.28 |
| vf-system-php8 | 8.2.28 | Hypervisor | Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 9, RHEL 8 | x86_64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.28 |
| vf-php8 | 8.2.28 | Hypervisor | Debian 12 | AArch64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.28 |
| vf-system-php8 | 8.2.28 | Hypervisor | Debian 12 | AArch64 | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.28 |
| vf-nginx | 1.28.0 | Control, Hypervisor | Debian 12 | AArch64 | https://nginx.org/en/CHANGES-1.28 | |
| vf-nginx | 1.28.0 | Control, Hypervisor | Debian 13, Debian 12, Debian 11, Ubuntu 24.04, Ubuntu 22.04, RHEL 10, RHEL 9, RHEL 8 | x86_64 | https://nginx.org/en/CHANGES-1.28 | |
| vf-php8 | 8.3.22 | Control, Hypervisor | Debian 13, RHEL 10 | x86_64 | https://www.php.net/ChangeLog-8.php#8.3.22 | |
| vf-system-php8 | 8.3.22 | Hypervisor | Debian 13, RHEL 10 | x86_64 | https://www.php.net/ChangeLog-8.php#8.3.22 |
January 6, 2025
This release addresses several vulnerabilities that could potentially impact the security and performance of your system.
Updated Packages
| Package | Version | Systems | Security | Notes |
|---|---|---|---|---|
| vf-php8 | 8.2.27-1 | Control, Hypervisor | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.27 |
| vf-system-php8 | 8.2.27-1 | Hypervisor | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.27 |
| vf-nginx | 1.26.2-1 | Control, Hypervisor | https://nginx.org/en/CHANGES-1.26 |
How to Update
The following commands which should be run as root in SSH have been pre-prepared for your base distribution.
- Debian/Ubuntu
- RHEL
Control
apt-get update -y && apt-get install --only-upgrade vf-nginx vf-php8 -y
vfcli-ctrl app:restart --services=queue,fpm,web
Hypervisor
apt-get update -y && apt-get install --only-upgrade vf-nginx vf-php8 vf-system-php8 -y
vfcli-hv app:restart --services=queue,system-fpm,fpm,web
Control
dnf makecache -y && dnf update vf-nginx vf-php8 -y
vfcli-ctrl app:restart --services=queue,fpm,web
Hypervisor
dnf makecache -y && dnf update vf-nginx vf-php8 vf-system-php8 -y
vfcli-hv app:restart --services=queue,system-fpm,fpm,web
Learn more about how to update your system packages
June 7, 2024
This release addresses several high-priority vulnerabilities that could potentially impact the security and performance of your system.
Updated Packages
| Package | Version | Systems | Security | Notes |
|---|---|---|---|---|
| vf-php8 | 8.2.20-1 | Control, Hypervisor | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.20 |
| vf-system-php8 | 8.2.20-1 | Hypervisor | 🚨 | https://www.php.net/ChangeLog-8.php#8.2.20 |
| vf-nginx | 1.26.1-1 | Control, Hypervisor | 🚨 | https://nginx.org/en/CHANGES-1.26 |
How to Update
The following commands which should be run as root in SSH have been pre-prepared for your base distribution.
- Debian/Ubuntu
- RHEL
Control
apt-get update -y && apt-get install --only-upgrade vf-nginx vf-php8 -y
vfcli-ctrl app:restart --services=queue,fpm,web
Hypervisor
apt-get update -y && apt-get install --only-upgrade vf-nginx vf-php8 vf-system-php8 -y
vfcli-hv app:restart --services=queue,system-fpm,fpm,web
Control
dnf makecache -y && dnf update vf-nginx vf-php8 -y
vfcli-ctrl app:restart --services=queue,fpm,web
Hypervisor
dnf makecache -y && dnf update vf-nginx vf-php8 vf-system-php8 -y
vfcli-hv app:restart --services=queue,system-fpm,fpm,web