ICYMI, the patched PHP packages for CVE-2026-109618 and CVE-2026-109619 have been rolled out to the production repositories for every PHP stream on AlmaLinux 8, 9, and 10.
Learn more about the CVEs and get the patched packages!
https://almalinux.org/blog/2026-10-21-php2shell-cve-2026-109618-cve-2026-109619/
AlmaLinux OSphp2shell (CVE-2026-109618, CVE-2026-109619): Patched PHP packages releasedUpdate: Patched PHP packages are now in production2026-10-21 21:15 UTC: The patched PHP packages are now rolling out to the production repositories for every PHP stream on AlmaLinux 8, 9, and 10. You no longer need to enable the testing repo to get them. Just run:
sudo dnf clean metadata && sudo dnf upgrade 'php*'
sudo systemctl restart php-fpm
If you use mod_php on AlmaLinux 8, restart Apache wit