Critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619): patched

  • Thursday, 22nd October, 2026
  • 08:31am

The following versions have now been patched on all servers...

Patched ea-php packages have been released to the stable repository for all versions from ea-php52 through ea-php85. Fixed versions (elX = el7, el8, el9 or el10):

- ea-php52: 5.2.17-27.elX.cloudlinux.67

- ea-php53: 5.3.29-29.elX.cloudlinux.69

- ea-php54: 5.4.45-82.elX.cloudlinux.9

- ea-php55: 5.5.38-64.elX.cloudlinux.10

- ea-php56: 5.6.40-25.elX.cloudlinux.18

- ea-php70: 7.0.33-29.elX.cloudlinux.17

- ea-php71: 7.1.33-20.elX.cloudlinux.17

- ea-php72: 7.2.34-12.elX.cloudlinux.18

- ea-php73: 7.3.33-15.elX.cloudlinux.18

- ea-php74: 7.4.33-18.elX.cloudlinux.13

- ea-php80: 8.0.30-11.elX.cloudlinux.1

- ea-php81: 8.1.34-4.elX.cloudlinux.1

- ea-php82: 8.2.34-2.elX.cloudlinux.1

- ea-php83: 8.3.35-2.elX.cloudlinux.2

- ea-php84: 8.4.26-2.elX.cloudlinux.1

- ea-php85: 8.5.11-2.elX.cloudlinux.1

« Back