Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

Australian DNS Network

Authoritative name servers in Sydney, Melbourne, Perth and Adelaide for domains hosted with Skyrack.

Sydney DNS servers and beyond

Four Australian DNS locations

DNS FAQ

DNS hosting in Australia: common questions

Is this a public DNS resolver I can use on my router or computer?

No. These are authoritative name servers. They hold the DNS records for domains hosted with Skyrack and answer questions about those domains only. A public resolver, such as the one you might set on a router, looks up any domain on the internet on your behalf. They do different jobs. For the difference in more detail, read authoritative DNS vs public DNS resolvers.

Where are your Australian DNS servers?

We run DNS nodes in Sydney, Melbourne, Perth and Adelaide. Our web servers are in a Sydney data centre.

Do I need to pay extra for DNS hosting?

No. DNS hosting for your domain is included with your hosting plan, and you edit records yourself in cPanel's Zone Editor. See cPanel hosting plans.

Do I have to register my domain with Skyrack to use your DNS?

No. A domain registered anywhere can use our name servers once you set our nameservers at your registrar. We will give you the nameservers to use, or ask us. You can also register or transfer a domain with us.

How long does a nameserver change take?

Often a few minutes, sometimes up to a day or so, because other networks cache the old answer for a while. If we are migrating your site, it keeps running on the old host until the change has taken effect, so the move is generally without downtime.

DNS hosting Australia, included with your plan

cPanel hosting from $4.98/month with Australian name servers and a Zone Editor.

See cPanel hosting plans