Hello Sangoma/FreePBX team,
We operate FreePBX 17 on Debian 12 using official Debian PHP 8.2 packages. We plan to retain this configuration with Debian LTS security updates for now.
The FreePBX version table lists FreePBX 17 support through June 2028, while the FreePBX 17 overview’s PHP-specific security statement only extends through December 2026. The FAQ also states that modules are tested with PHP 8.2 and that newer PHP versions are unsupported.
Could you please confirm:
- Will Debian LTS-maintained PHP 8.2 remain a Sangoma-supported configuration for FreePBX 17 after December 31, 2026? Until what date?
- Who will provide PHP security fixes after upstream support ends: Debian LTS, Sangoma, or another service? Is a particular support subscription required?
- Does this coverage include compatibility with Sangoma commercial modules and their required dependencies?
- If migration becomes necessary, what supported destination and migration procedure do you recommend, including module licensing and rollback requirements?
Please provide a published policy or written confirmation distinguishing FreePBX platform support from PHP runtime security maintenance.
References:
- FreePBX 17 overview: https://sangomakb.atlassian.net/wiki/spaces/FP/pages/222101505/FreePBX%2B17
- FreePBX version lifecycle: https://sangomakb.atlassian.net/wiki/spaces/FP/pages/653197359/FreePBX%2BVersions
Thank you.