PHP CVE-2026-109618 and CVE-2026-109619: how to apply the patches 0 ▲ Mattias Geniar 1 hour ago · Tech · hide · 0 comments Status at 10:40 UTC: the fixed PHP is not out yet. PHP releases it on 21 October 2026 at 14:00 UTC. Ubuntu, Debian, Red Hat and the third-party repositories follow after that. This post updates as the packages arrive. No comments yet. Log in to reply on the Fediverse. Comments will appear here.