Inherited a bunch of Ubuntu 20.04 legacy servers. Some on 8.3 at least, some on < 8 :(

Snagged a free tier Ubuntu Pro to see if that helps.

ran sudo pro fix CVE-2026-109619

and got

1 affected source package is installed: php7.4

(1/1) php7.4:

A fix is available in Ubuntu Pro: ESM Infra.

The update is already installed.

though php -v shows

PHP 8.3.3-1+ubuntu20.04.1+deb.sury.org+1 (cli) (built: Feb 15 2024 18:38:21) (NTS)

I'm guessing some one manually built 8.3 on this server. Anyone got a good step-by-step on how to patch in this case?