{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "PHP Group PHP: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/php-group--php/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/php-group--php/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 disclosed",
   "content_text": "PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in AlmaLinux:10",
   "content_text": "Fixed versions: php 8.3.36-1.el10_2, php-bcmath 8.3.36-1.el10_2, php-cli 8.3.36-1.el10_2, php-common 8.3.36-1.el10_2, php-dba 8.3.36-1.el10_2, php-dbg 8.3.36-1.el10_2, php-devel 8.3.36-1.el10_2, php-embedded 8.3.36-1.el10_2, php-enchant 8.3.36-1.el10_2, php-ffi 8.3.36-1.el10_2, php-fpm 8.3.36-1.el10_2, php-gd 8.3.36-1.el10_2, php-gmp 8.3.36-1.el10_2, php-intl 8.3.36-1.el10_2, php-ldap 8.3.36-1.el10_2, php-mbstring 8.3.36-1.el10_2, php-mysqlnd 8.3.36-1.el10_2, php-odbc 8.3.36-1.el10_2, php-opcache 8.3.36-1.el10_2, php-pdo 8.3.36-1.el10_2, php-pgsql 8.3.36-1.el10_2, php-process 8.3.36-1.el10_2, php-snmp 8.3.36-1.el10_2, php-soap 8.3.36-1.el10_2, php-xml 8.3.36-1.el10_2, php8.4 8.4.27-1.el10_2, php8.4-bcmath 8.4.27-1.el10_2, php8.4-cli 8.4.27-1.el10_2, php8.4-common 8.4.27-1.el10_2, php8.4-dba 8.4.27-1.el10_2, php8.4-dbg 8.4.27-1.el10_2, php8.4-devel 8.4.27-1.el10_2, php8.4-embedded 8.4.27-1.el10_2, php8.4-enchant 8.4.27-1.el10_2, php8.4-ffi 8.4.27-1.el10_2, php8.4-fpm 8.4.27-1.el10_2, php8.4-gd 8.4.27-1.el10_2, php8.4-gmp 8.4.27-1.el10_2, php8.4-intl 8.4.27-1.el10_2, php8.4-ldap 8.4.27-1.el10_2, php8.4-mbstring 8.4.27-1.el10_2, php8.4-mysqlnd 8.4.27-1.el10_2, php8.4-odbc 8.4.27-1.el10_2, php8.4-opcache 8.4.27-1.el10_2, php8.4-pdo 8.4.27-1.el10_2, php8.4-pgsql 8.4.27-1.el10_2, php8.4-process 8.4.27-1.el10_2, php8.4-snmp 8.4.27-1.el10_2, php8.4-soap 8.4.27-1.el10_2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in AlmaLinux:8",
   "content_text": "Fixed versions: apcu-panel 5.1.18-1.module_el8.6.0+2750+78feabcb, apcu-panel 5.1.23-1.module_el8.10.0+3796+30ed3ef7, libzip 1.6.1-1.module_el8.10.0+3935+28808425, libzip 1.6.1-1.module_el8.6.0+2750+78feabcb, libzip 1.6.1-1.module_el8.6.0+3239+bedf0508, libzip 1.7.3-1.module_el8.10.0+3796+30ed3ef7, libzip-devel 1.6.1-1.module_el8.10.0+3935+28808425, libzip-devel 1.6.1-1.module_el8.6.0+2750+78feabcb, libzip-devel 1.6.1-1.module_el8.6.0+3239+bedf0508, libzip-devel 1.7.3-1.module_el8.10.0+3796+30ed3ef7, libzip-tools 1.6.1-1.module_el8.10.0+3935+28808425, libzip-tools 1.6.1-1.module_el8.6.0+3239+bedf0508, libzip-tools 1.7.3-1.module_el8.10.0+3796+30ed3ef7, php 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php 8.2.35-1.module_el8.10.0+4323+fc907035, php-bcmath 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-bcmath 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-bcmath 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-bcmath 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-bcmath 8.2.35-1.module_el8.10.0+4323+fc907035, php-cli 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-cli 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-cli 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-cli 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-cli 8.2.35-1.module_el8.10.0+4323+fc907035, php-common 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-common 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-common 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-common 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-common 8.2.35-1.module_el8.10.0+4323+fc907035, php-dba 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-dba 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-dba 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-dba 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-dba 8.2.35-1.module_el8.10.0+4323+fc907035, php-dbg 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-dbg 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-dbg 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-dbg 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-dbg 8.2.35-1.module_el8.10.0+4323+fc907035, php-devel 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-devel 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-devel 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-devel 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-devel 8.2.35-1.module_el8.10.0+4323+fc907035, php-embedded 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-embedded 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-embedded 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-embedded 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-embedded 8.2.35-1.module_el8.10.0+4323+fc907035, php-enchant 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-enchant 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-enchant 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-enchant 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-enchant 8.2.35-1.module_el8.10.0+4323+fc907035, php-ffi 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-ffi 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-ffi 8.2.35-1.module_el8.10.0+4323+fc907035, php-fpm 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-fpm 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-fpm 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-fpm 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-fpm 8.2.35-1.module_el8.10.0+4323+fc907035, php-gd 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-gd 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-gd 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-gd 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-gd 8.2.35-1.module_el8.10.0+4323+fc907035, php-gmp 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-gmp 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-gmp 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-gmp 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-gmp 8.2.35-1.module_el8.10.0+4323+fc907035, php-intl 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-intl 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-intl 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-intl 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-intl 8.2.35-1.module_el8.10.0+4323+fc907035, php-json 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-json 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-json 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-ldap 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-ldap 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-ldap 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-ldap 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-ldap 8.2.35-1.module_el8.10.0+4323+fc907035, php-mbstring 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-mbstring 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-mbstring 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-mbstring 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-mbstring 8.2.35-1.module_el8.10.0+4323+fc907035, php-mysqlnd 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-mysqlnd 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-mysqlnd 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-mysqlnd 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-mysqlnd 8.2.35-1.module_el8.10.0+4323+fc907035, php-odbc 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-odbc 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-odbc 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-odbc 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-odbc 8.2.35-1.module_el8.10.0+4323+fc907035, php-opcache 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-opcache 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-opcache 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-opcache 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-opcache 8.2.35-1.module_el8.10.0+4323+fc907035, php-pdo 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-pdo 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-pdo 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-pdo 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-pdo 8.2.35-1.module_el8.10.0+4323+fc907035, php-pear 1:1.10.13-1.module_el8.10.0+3935+28808425, php-pear 1:1.10.14-1.module_el8.10.0+3796+30ed3ef7, php-pecl-apcu 5.1.18-1.module_el8.10.0+3935+28808425, php-pecl-apcu 5.1.18-1.module_el8.6.0+2750+78feabcb, php-pecl-apcu 5.1.23-1.module_el8.10.0+3796+30ed3ef7, php-pecl-apcu-devel 5.1.18-1.module_el8.10.0+3935+28808425, php-pecl-apcu-devel 5.1.18-1.module_el8.6.0+2750+78feabcb, php-pecl-apcu-devel 5.1.23-1.module_el8.10.0+3796+30ed3ef7, php-pecl-rrd 2.0.1-1.module_el8.10.0+3935+28808425, php-pecl-rrd 2.0.1-1.module_el8.6.0+2750+78feabcb, php-pecl-rrd 2.0.1-1.module_el8.6.0+3239+bedf0508, php-pecl-rrd 2.0.3-1.module_el8.10.0+3796+30ed3ef7, php-pecl-xdebug 2.9.5-1.module_el8.6.0+2750+78feabcb, php-pecl-xdebug 2.9.5-1.module_el8.6.0+3239+bedf0508, php-pecl-xdebug3 3.2.2-2.module_el8.10.0+3796+30ed3ef7, php-pecl-zip 1.18.2-1.module_el8.10.0+3935+28808425, php-pecl-zip 1.18.2-1.module_el8.6.0+2750+78feabcb, php-pecl-zip 1.18.2-1.module_el8.6.0+3239+bedf0508, php-pecl-zip 1.22.3-1.module_el8.10.0+3796+30ed3ef7, php-pgsql 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-pgsql 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-pgsql 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-pgsql 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-pgsql 8.2.35-1.module_el8.10.0+4323+fc907035, php-process 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-process 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-process 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-process 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-process 8.2.35-1.module_el8.10.0+4323+fc907035, php-recode 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-recode 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-snmp 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-snmp 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-snmp 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-snmp 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-snmp 8.2.35-1.module_el8.10.0+4323+fc907035, php-soap 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-soap 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-soap 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-soap 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-soap 8.2.35-1.module_el8.10.0+4323+fc907035, php-xml 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-xml 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-xml 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-xml 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-xml 8.2.35-1.module_el8.10.0+4323+fc907035, php-xmlrpc 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-xmlrpc 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-xmlrpc 7.4.33-8.module_el8.10.0+4321+cf5fd4bb.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in AlmaLinux:9",
   "content_text": "Fixed versions: apcu-panel 5.1.23-1.module_el9.4.0+65+49ff6472, apcu-panel 5.1.23-1.module_el9.6.0+151+5f31e576, php 8.0.30-8.el9_8.1, php 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php 8.3.36-1.module_el9.8.0+330+fdc30075, php-bcmath 8.0.30-8.el9_8.1, php-bcmath 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-bcmath 8.3.36-1.module_el9.8.0+330+fdc30075, php-cli 8.0.30-8.el9_8.1, php-cli 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-cli 8.3.36-1.module_el9.8.0+330+fdc30075, php-common 8.0.30-8.el9_8.1, php-common 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-common 8.3.36-1.module_el9.8.0+330+fdc30075, php-dba 8.0.30-8.el9_8.1, php-dba 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-dba 8.3.36-1.module_el9.8.0+330+fdc30075, php-dbg 8.0.30-8.el9_8.1, php-dbg 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-dbg 8.3.36-1.module_el9.8.0+330+fdc30075, php-devel 8.0.30-8.el9_8.1, php-devel 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-devel 8.3.36-1.module_el9.8.0+330+fdc30075, php-embedded 8.0.30-8.el9_8.1, php-embedded 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-embedded 8.3.36-1.module_el9.8.0+330+fdc30075, php-enchant 8.0.30-8.el9_8.1, php-enchant 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-enchant 8.3.36-1.module_el9.8.0+330+fdc30075, php-ffi 8.0.30-8.el9_8.1, php-ffi 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-ffi 8.3.36-1.module_el9.8.0+330+fdc30075, php-fpm 8.0.30-8.el9_8.1, php-fpm 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-fpm 8.3.36-1.module_el9.8.0+330+fdc30075, php-gd 8.0.30-8.el9_8.1, php-gd 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-gd 8.3.36-1.module_el9.8.0+330+fdc30075, php-gmp 8.0.30-8.el9_8.1, php-gmp 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-gmp 8.3.36-1.module_el9.8.0+330+fdc30075, php-intl 8.0.30-8.el9_8.1, php-intl 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-intl 8.3.36-1.module_el9.8.0+330+fdc30075, php-ldap 8.0.30-8.el9_8.1, php-ldap 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-ldap 8.3.36-1.module_el9.8.0+330+fdc30075, php-mbstring 8.0.30-8.el9_8.1, php-mbstring 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-mbstring 8.3.36-1.module_el9.8.0+330+fdc30075, php-mysqlnd 8.0.30-8.el9_8.1, php-mysqlnd 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-mysqlnd 8.3.36-1.module_el9.8.0+330+fdc30075, php-odbc 8.0.30-8.el9_8.1, php-odbc 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-odbc 8.3.36-1.module_el9.8.0+330+fdc30075, php-opcache 8.0.30-8.el9_8.1, php-opcache 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-opcache 8.3.36-1.module_el9.8.0+330+fdc30075, php-pdo 8.0.30-8.el9_8.1, php-pdo 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-pdo 8.3.36-1.module_el9.8.0+330+fdc30075, php-pecl-apcu 5.1.23-1.module_el9.4.0+65+49ff6472, php-pecl-apcu 5.1.23-1.module_el9.6.0+151+5f31e576, php-pecl-apcu 5.1.23-1.module_el9.8.0+287+a9a5bb73, php-pecl-apcu-devel 5.1.23-1.module_el9.4.0+65+49ff6472, php-pecl-apcu-devel 5.1.23-1.module_el9.6.0+151+5f31e576, php-pecl-apcu-devel 5.1.23-1.module_el9.8.0+287+a9a5bb73, php-pecl-redis6 6.1.0-3.module_el9.8.0+257+89d727f2, php-pecl-rrd 2.0.3-4.module_el9.4.0+65+49ff6472, php-pecl-rrd 2.0.3-4.module_el9.6.0+151+5f31e576, php-pecl-rrd 2.0.3-4.module_el9.8.0+287+a9a5bb73, php-pecl-xdebug3 3.2.2-2.module_el9.4.0+65+49ff6472, php-pecl-xdebug3 3.3.1-1.module_el9.6.0+151+5f31e576, php-pecl-xdebug3 3.3.1-1.module_el9.8.0+287+a9a5bb73, php-pecl-zip 1.22.3-1.module_el9.4.0+65+49ff6472, php-pecl-zip 1.22.3-1.module_el9.6.0+151+5f31e576, php-pecl-zip 1.22.3-1.module_el9.8.0+287+a9a5bb73, php-pgsql 8.0.30-8.el9_8.1, php-pgsql 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-pgsql 8.3.36-1.module_el9.8.0+330+fdc30075, php-process 8.0.30-8.el9_8.1, php-process 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-process 8.3.36-1.module_el9.8.0+330+fdc30075, php-snmp 8.0.30-8.el9_8.1, php-snmp 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-snmp 8.3.36-1.module_el9.8.0+330+fdc30075, php-soap 8.0.30-8.el9_8.1, php-soap 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-soap 8.3.36-1.module_el9.8.0+330+fdc30075, php-xml 8.0.30-8.el9_8.1, php-xml 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-xml 8.3.36-1.module_el9.8.0+330+fdc30075.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Chainguard",
   "content_text": "Fixed versions: php-8.2 8.2.34-r4, php-8.3 8.3.35-r4, php-8.4 8.4.26-r4, php-8.5 8.5.11-r4.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/debian-12",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Debian:12",
   "content_text": "Fixed versions: php8.2 8.2.35-1~deb12u1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Debian:13",
   "content_text": "Fixed versions: php8.4 8.4.27-1~deb13u1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Debian:14",
   "content_text": "Fixed versions: php8.4 8.4.27-1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in openSUSE:Leap 16.0",
   "content_text": "Fixed versions: apache2-mod_php8 8.4.27-160000.1.1, php8 8.4.27-160000.1.1, php8-embed 8.4.27-160000.1.1, php8-fastcgi 8.4.27-160000.1.1, php8-fpm 8.4.27-160000.1.1, php8-test 8.4.27-160000.1.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in openSUSE:Tumbleweed",
   "content_text": "Fixed versions: php8 8.5.12-1.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Rocky Linux:10",
   "content_text": "Fixed versions: php 0:8.3.36-1.el10_2, php8.4 0:8.4.27-1.el10_2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Rocky Linux:8",
   "content_text": "Fixed versions: libzip 0:1.6.1-1.module+el8.10.0+1604+6558efc7, libzip 0:1.6.1-1.module+el8.10.0+1912+72767185, libzip 0:1.7.3-1.module+el8.10.0+1596+477f03f8, libzip 0:1.7.3-1.module+el8.10.0+1605+02e07af7, libzip 0:1.7.3-1.module+el8.10.0+1911+f499711e, php 0:7.4.33-8.module+el8.10.0+40393+c071e357, php 0:8.2.35-1.module+el8.10.0+40394+d21b33fb, php-pear 1:1.10.13-1.module+el8.10.0+1604+6558efc7, php-pear 1:1.10.13-1.module+el8.10.0+1605+02e07af7, php-pear 1:1.10.13-1.module+el8.10.0+1912+72767185, php-pear 1:1.10.14-1.module+el8.10.0+1596+477f03f8, php-pear 1:1.10.14-1.module+el8.10.0+1911+f499711e, php-pecl-apcu 0:5.1.18-1.module+el8.10.0+1604+6558efc7, php-pecl-apcu 0:5.1.18-1.module+el8.10.0+1912+72767185, php-pecl-apcu 0:5.1.23-1.module+el8.10.0+1596+477f03f8, php-pecl-apcu 0:5.1.23-1.module+el8.10.0+1911+f499711e, php-pecl-rrd 0:2.0.1-1.module+el8.10.0+1604+6558efc7, php-pecl-rrd 0:2.0.1-1.module+el8.10.0+1912+72767185, php-pecl-rrd 0:2.0.1-1.module+el8.4.0+414+2e7afcdd, php-pecl-rrd 0:2.0.3-1.module+el8.10.0+1596+477f03f8, php-pecl-rrd 0:2.0.3-1.module+el8.10.0+1605+02e07af7, php-pecl-rrd 0:2.0.3-1.module+el8.10.0+1911+f499711e, php-pecl-xdebug 0:2.9.5-1.module+el8.10.0+1604+6558efc7, php-pecl-xdebug 0:2.9.5-1.module+el8.10.0+1912+72767185, php-pecl-xdebug3 0:3.2.2-2.module+el8.10.0+1596+477f03f8, php-pecl-xdebug3 0:3.2.2-2.module+el8.10.0+1911+f499711e, php-pecl-zip 0:1.18.2-1.module+el8.10.0+1604+6558efc7, php-pecl-zip 0:1.18.2-1.module+el8.10.0+1912+72767185, php-pecl-zip 0:1.22.3-1.module+el8.10.0+1596+477f03f8, php-pecl-zip 0:1.22.3-1.module+el8.10.0+1911+f499711e.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Rocky Linux:9",
   "content_text": "Fixed versions: php 0:8.0.30-8.el9_8.1, php 0:8.2.35-1.module+el9.8.0+40395+2f706e64, php 0:8.3.36-1.module+el9.8.0+40396+4e680bb7, php-pecl-apcu 0:5.1.23-1.module+el9.7.0+40004+bf50a568, php-pecl-apcu 0:5.1.23-1.module+el9.7.0+40005+715283ec, php-pecl-redis6 0:6.1.0-3.module+el9.8.0+40203+35cc8ffc, php-pecl-rrd 0:2.0.3-4.module+el9.7.0+40003+454ed3c4, php-pecl-rrd 0:2.0.3-4.module+el9.7.0+40004+bf50a568, php-pecl-rrd 0:2.0.3-4.module+el9.7.0+40005+715283ec, php-pecl-xdebug3 0:3.2.2-2.module+el9.7.0+40004+bf50a568, php-pecl-xdebug3 0:3.3.1-1.module+el9.7.0+40005+715283ec, php-pecl-zip 0:1.22.3-1.module+el9.7.0+40004+bf50a568, php-pecl-zip 0:1.22.3-1.module+el9.7.0+40005+715283ec.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: apache2-mod_php8 8.0.30-150400.4.80.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: apache2-mod_php8 8.0.30-150400.4.80.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-module-for-legacy-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Module for Legacy 15 SP7",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, php7 7.4.33-150400.4.81.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-module-for-package-hub-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Module for Package Hub 15 SP7",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, php7 7.4.33-150400.4.81.1, php7-embed 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php7-test 7.4.33-150400.4.81.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-module-for-web-and-scripting-12",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Module for Web and Scripting 12",
   "content_text": "Fixed versions: php74 7.4.33-1.74.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-module-for-web-and-scripting-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Module for Web and Scripting 15 SP7",
   "content_text": "Fixed versions: apache2-mod_php8 8.3.36-150700.3.24.1, php8 8.3.36-150700.3.24.1, php8-embed 8.3.36-150700.3.24.1, php8-fastcgi 8.3.36-150700.3.24.1, php8-fpm 8.3.36-150700.3.24.1, php8-test 8.3.36-150700.3.24.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.2.35-150600.3.39.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.2.35-150600.3.39.1, php8-embed 8.2.35-150600.3.39.1, php8-fastcgi 8.2.35-150600.3.39.1, php8-fpm 8.2.35-150600.3.39.1, php8-test 8.2.35-150600.3.39.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server 16.0",
   "content_text": "Fixed versions: apache2-mod_php8 8.4.27-160000.1.1, php8 8.4.27-160000.1.1, php8-embed 8.4.27-160000.1.1, php8-fastcgi 8.4.27-160000.1.1, php8-fpm 8.4.27-160000.1.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.2.35-150600.3.39.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.2.35-150600.3.39.1, php8-embed 8.2.35-150600.3.39.1, php8-fastcgi 8.2.35-150600.3.39.1, php8-fpm 8.2.35-150600.3.39.1, php8-test 8.2.35-150600.3.39.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in SUSE:Linux Enterprise Server for SAP applications 16.0",
   "content_text": "Fixed versions: apache2-mod_php8 8.4.27-160000.1.1, php8 8.4.27-160000.1.1, php8-embed 8.4.27-160000.1.1, php8-fastcgi 8.4.27-160000.1.1, php8-fpm 8.4.27-160000.1.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:22.04:LTS",
   "content_text": "Fixed versions: php8.1 8.1.2-1ubuntu2.28.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:24.04:LTS",
   "content_text": "Fixed versions: php8.3 8.3.6-0ubuntu0.24.04.13.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:26.04:LTS",
   "content_text": "Fixed versions: php8.5 8.5.4-0ubuntu1.5.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:26.10",
   "content_text": "Fixed versions: php8.5 8.5.9-0ubuntu2.1.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-pro-14.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:Pro:14.04:LTS",
   "content_text": "Fixed versions: php5 5.5.9+dfsg-1ubuntu4.29+esm18.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-pro-16.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:Pro:16.04:LTS",
   "content_text": "Fixed versions: php7.0 7.0.33-0ubuntu0.16.04.16+esm22.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-pro-18.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:Pro:18.04:LTS",
   "content_text": "Fixed versions: php7.2 7.2.24-0ubuntu0.18.04.17+esm14.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/ubuntu-pro-20.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Ubuntu:Pro:20.04:LTS",
   "content_text": "Fixed versions: php7.4 7.4.3-4ubuntu2.29+esm5.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109619/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109619/",
   "title": "CVE-2026-109619 fixed in Wolfi",
   "content_text": "Fixed versions: php-8.2 8.2.34-r4, php-8.3 8.3.35-r4, php-8.4 8.4.26-r4, php-8.5 8.5.11-r4.",
   "date_published": "2026-10-21T13:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 disclosed",
   "content_text": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in AlmaLinux:10",
   "content_text": "Fixed versions: php 8.3.36-1.el10_2, php-bcmath 8.3.36-1.el10_2, php-cli 8.3.36-1.el10_2, php-common 8.3.36-1.el10_2, php-dba 8.3.36-1.el10_2, php-dbg 8.3.36-1.el10_2, php-devel 8.3.36-1.el10_2, php-embedded 8.3.36-1.el10_2, php-enchant 8.3.36-1.el10_2, php-ffi 8.3.36-1.el10_2, php-fpm 8.3.36-1.el10_2, php-gd 8.3.36-1.el10_2, php-gmp 8.3.36-1.el10_2, php-intl 8.3.36-1.el10_2, php-ldap 8.3.36-1.el10_2, php-mbstring 8.3.36-1.el10_2, php-mysqlnd 8.3.36-1.el10_2, php-odbc 8.3.36-1.el10_2, php-opcache 8.3.36-1.el10_2, php-pdo 8.3.36-1.el10_2, php-pgsql 8.3.36-1.el10_2, php-process 8.3.36-1.el10_2, php-snmp 8.3.36-1.el10_2, php-soap 8.3.36-1.el10_2, php-xml 8.3.36-1.el10_2, php8.4 8.4.27-1.el10_2, php8.4-bcmath 8.4.27-1.el10_2, php8.4-cli 8.4.27-1.el10_2, php8.4-common 8.4.27-1.el10_2, php8.4-dba 8.4.27-1.el10_2, php8.4-dbg 8.4.27-1.el10_2, php8.4-devel 8.4.27-1.el10_2, php8.4-embedded 8.4.27-1.el10_2, php8.4-enchant 8.4.27-1.el10_2, php8.4-ffi 8.4.27-1.el10_2, php8.4-fpm 8.4.27-1.el10_2, php8.4-gd 8.4.27-1.el10_2, php8.4-gmp 8.4.27-1.el10_2, php8.4-intl 8.4.27-1.el10_2, php8.4-ldap 8.4.27-1.el10_2, php8.4-mbstring 8.4.27-1.el10_2, php8.4-mysqlnd 8.4.27-1.el10_2, php8.4-odbc 8.4.27-1.el10_2, php8.4-opcache 8.4.27-1.el10_2, php8.4-pdo 8.4.27-1.el10_2, php8.4-pgsql 8.4.27-1.el10_2, php8.4-process 8.4.27-1.el10_2, php8.4-snmp 8.4.27-1.el10_2, php8.4-soap 8.4.27-1.el10_2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in AlmaLinux:8",
   "content_text": "Fixed versions: apcu-panel 5.1.18-1.module_el8.6.0+2750+78feabcb, apcu-panel 5.1.23-1.module_el8.10.0+3796+30ed3ef7, libzip 1.6.1-1.module_el8.10.0+3935+28808425, libzip 1.6.1-1.module_el8.6.0+2750+78feabcb, libzip 1.6.1-1.module_el8.6.0+3239+bedf0508, libzip 1.7.3-1.module_el8.10.0+3796+30ed3ef7, libzip-devel 1.6.1-1.module_el8.10.0+3935+28808425, libzip-devel 1.6.1-1.module_el8.6.0+2750+78feabcb, libzip-devel 1.6.1-1.module_el8.6.0+3239+bedf0508, libzip-devel 1.7.3-1.module_el8.10.0+3796+30ed3ef7, libzip-tools 1.6.1-1.module_el8.10.0+3935+28808425, libzip-tools 1.6.1-1.module_el8.6.0+3239+bedf0508, libzip-tools 1.7.3-1.module_el8.10.0+3796+30ed3ef7, php 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php 8.2.35-1.module_el8.10.0+4323+fc907035, php-bcmath 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-bcmath 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-bcmath 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-bcmath 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-bcmath 8.2.35-1.module_el8.10.0+4323+fc907035, php-cli 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-cli 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-cli 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-cli 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-cli 8.2.35-1.module_el8.10.0+4323+fc907035, php-common 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-common 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-common 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-common 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-common 8.2.35-1.module_el8.10.0+4323+fc907035, php-dba 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-dba 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-dba 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-dba 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-dba 8.2.35-1.module_el8.10.0+4323+fc907035, php-dbg 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-dbg 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-dbg 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-dbg 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-dbg 8.2.35-1.module_el8.10.0+4323+fc907035, php-devel 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-devel 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-devel 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-devel 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-devel 8.2.35-1.module_el8.10.0+4323+fc907035, php-embedded 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-embedded 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-embedded 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-embedded 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-embedded 8.2.35-1.module_el8.10.0+4323+fc907035, php-enchant 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-enchant 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-enchant 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-enchant 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-enchant 8.2.35-1.module_el8.10.0+4323+fc907035, php-ffi 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-ffi 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-ffi 8.2.35-1.module_el8.10.0+4323+fc907035, php-fpm 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-fpm 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-fpm 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-fpm 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-fpm 8.2.35-1.module_el8.10.0+4323+fc907035, php-gd 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-gd 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-gd 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-gd 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-gd 8.2.35-1.module_el8.10.0+4323+fc907035, php-gmp 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-gmp 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-gmp 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-gmp 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-gmp 8.2.35-1.module_el8.10.0+4323+fc907035, php-intl 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-intl 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-intl 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-intl 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-intl 8.2.35-1.module_el8.10.0+4323+fc907035, php-json 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-json 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-json 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-ldap 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-ldap 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-ldap 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-ldap 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-ldap 8.2.35-1.module_el8.10.0+4323+fc907035, php-mbstring 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-mbstring 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-mbstring 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-mbstring 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-mbstring 8.2.35-1.module_el8.10.0+4323+fc907035, php-mysqlnd 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-mysqlnd 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-mysqlnd 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-mysqlnd 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-mysqlnd 8.2.35-1.module_el8.10.0+4323+fc907035, php-odbc 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-odbc 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-odbc 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-odbc 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-odbc 8.2.35-1.module_el8.10.0+4323+fc907035, php-opcache 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-opcache 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-opcache 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-opcache 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-opcache 8.2.35-1.module_el8.10.0+4323+fc907035, php-pdo 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-pdo 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-pdo 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-pdo 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-pdo 8.2.35-1.module_el8.10.0+4323+fc907035, php-pear 1:1.10.13-1.module_el8.10.0+3935+28808425, php-pear 1:1.10.14-1.module_el8.10.0+3796+30ed3ef7, php-pecl-apcu 5.1.18-1.module_el8.10.0+3935+28808425, php-pecl-apcu 5.1.18-1.module_el8.6.0+2750+78feabcb, php-pecl-apcu 5.1.23-1.module_el8.10.0+3796+30ed3ef7, php-pecl-apcu-devel 5.1.18-1.module_el8.10.0+3935+28808425, php-pecl-apcu-devel 5.1.18-1.module_el8.6.0+2750+78feabcb, php-pecl-apcu-devel 5.1.23-1.module_el8.10.0+3796+30ed3ef7, php-pecl-rrd 2.0.1-1.module_el8.10.0+3935+28808425, php-pecl-rrd 2.0.1-1.module_el8.6.0+2750+78feabcb, php-pecl-rrd 2.0.1-1.module_el8.6.0+3239+bedf0508, php-pecl-rrd 2.0.3-1.module_el8.10.0+3796+30ed3ef7, php-pecl-xdebug 2.9.5-1.module_el8.6.0+2750+78feabcb, php-pecl-xdebug 2.9.5-1.module_el8.6.0+3239+bedf0508, php-pecl-xdebug3 3.2.2-2.module_el8.10.0+3796+30ed3ef7, php-pecl-zip 1.18.2-1.module_el8.10.0+3935+28808425, php-pecl-zip 1.18.2-1.module_el8.6.0+2750+78feabcb, php-pecl-zip 1.18.2-1.module_el8.6.0+3239+bedf0508, php-pecl-zip 1.22.3-1.module_el8.10.0+3796+30ed3ef7, php-pgsql 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-pgsql 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-pgsql 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-pgsql 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-pgsql 8.2.35-1.module_el8.10.0+4323+fc907035, php-process 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-process 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-process 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-process 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-process 8.2.35-1.module_el8.10.0+4323+fc907035, php-recode 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-recode 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-snmp 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-snmp 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-snmp 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-snmp 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-snmp 8.2.35-1.module_el8.10.0+4323+fc907035, php-soap 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-soap 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-soap 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-soap 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-soap 8.2.35-1.module_el8.10.0+4323+fc907035, php-xml 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-xml 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-xml 7.4.33-8.module_el8.10.0+4321+cf5fd4bb, php-xml 8.0.30-1.module_el8.10.0+4319+26f10322.alma.1, php-xml 8.2.35-1.module_el8.10.0+4323+fc907035, php-xmlrpc 7.2.24-1.module_el8.10.0+4315+7b734bf3.alma.1, php-xmlrpc 7.3.20-1.module_el8.10.0+4316+90ea5fe5.alma.1, php-xmlrpc 7.4.33-8.module_el8.10.0+4321+cf5fd4bb.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in AlmaLinux:9",
   "content_text": "Fixed versions: apcu-panel 5.1.23-1.module_el9.4.0+65+49ff6472, apcu-panel 5.1.23-1.module_el9.6.0+151+5f31e576, php 8.0.30-8.el9_8.1, php 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php 8.3.36-1.module_el9.8.0+330+fdc30075, php-bcmath 8.0.30-8.el9_8.1, php-bcmath 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-bcmath 8.3.36-1.module_el9.8.0+330+fdc30075, php-cli 8.0.30-8.el9_8.1, php-cli 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-cli 8.3.36-1.module_el9.8.0+330+fdc30075, php-common 8.0.30-8.el9_8.1, php-common 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-common 8.3.36-1.module_el9.8.0+330+fdc30075, php-dba 8.0.30-8.el9_8.1, php-dba 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-dba 8.3.36-1.module_el9.8.0+330+fdc30075, php-dbg 8.0.30-8.el9_8.1, php-dbg 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-dbg 8.3.36-1.module_el9.8.0+330+fdc30075, php-devel 8.0.30-8.el9_8.1, php-devel 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-devel 8.3.36-1.module_el9.8.0+330+fdc30075, php-embedded 8.0.30-8.el9_8.1, php-embedded 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-embedded 8.3.36-1.module_el9.8.0+330+fdc30075, php-enchant 8.0.30-8.el9_8.1, php-enchant 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-enchant 8.3.36-1.module_el9.8.0+330+fdc30075, php-ffi 8.0.30-8.el9_8.1, php-ffi 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-ffi 8.3.36-1.module_el9.8.0+330+fdc30075, php-fpm 8.0.30-8.el9_8.1, php-fpm 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-fpm 8.3.36-1.module_el9.8.0+330+fdc30075, php-gd 8.0.30-8.el9_8.1, php-gd 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-gd 8.3.36-1.module_el9.8.0+330+fdc30075, php-gmp 8.0.30-8.el9_8.1, php-gmp 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-gmp 8.3.36-1.module_el9.8.0+330+fdc30075, php-intl 8.0.30-8.el9_8.1, php-intl 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-intl 8.3.36-1.module_el9.8.0+330+fdc30075, php-ldap 8.0.30-8.el9_8.1, php-ldap 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-ldap 8.3.36-1.module_el9.8.0+330+fdc30075, php-mbstring 8.0.30-8.el9_8.1, php-mbstring 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-mbstring 8.3.36-1.module_el9.8.0+330+fdc30075, php-mysqlnd 8.0.30-8.el9_8.1, php-mysqlnd 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-mysqlnd 8.3.36-1.module_el9.8.0+330+fdc30075, php-odbc 8.0.30-8.el9_8.1, php-odbc 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-odbc 8.3.36-1.module_el9.8.0+330+fdc30075, php-opcache 8.0.30-8.el9_8.1, php-opcache 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-opcache 8.3.36-1.module_el9.8.0+330+fdc30075, php-pdo 8.0.30-8.el9_8.1, php-pdo 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-pdo 8.3.36-1.module_el9.8.0+330+fdc30075, php-pecl-apcu 5.1.23-1.module_el9.4.0+65+49ff6472, php-pecl-apcu 5.1.23-1.module_el9.6.0+151+5f31e576, php-pecl-apcu 5.1.23-1.module_el9.8.0+287+a9a5bb73, php-pecl-apcu-devel 5.1.23-1.module_el9.4.0+65+49ff6472, php-pecl-apcu-devel 5.1.23-1.module_el9.6.0+151+5f31e576, php-pecl-apcu-devel 5.1.23-1.module_el9.8.0+287+a9a5bb73, php-pecl-redis6 6.1.0-3.module_el9.8.0+257+89d727f2, php-pecl-rrd 2.0.3-4.module_el9.4.0+65+49ff6472, php-pecl-rrd 2.0.3-4.module_el9.6.0+151+5f31e576, php-pecl-rrd 2.0.3-4.module_el9.8.0+287+a9a5bb73, php-pecl-xdebug3 3.2.2-2.module_el9.4.0+65+49ff6472, php-pecl-xdebug3 3.3.1-1.module_el9.6.0+151+5f31e576, php-pecl-xdebug3 3.3.1-1.module_el9.8.0+287+a9a5bb73, php-pecl-zip 1.22.3-1.module_el9.4.0+65+49ff6472, php-pecl-zip 1.22.3-1.module_el9.6.0+151+5f31e576, php-pecl-zip 1.22.3-1.module_el9.8.0+287+a9a5bb73, php-pgsql 8.0.30-8.el9_8.1, php-pgsql 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-pgsql 8.3.36-1.module_el9.8.0+330+fdc30075, php-process 8.0.30-8.el9_8.1, php-process 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-process 8.3.36-1.module_el9.8.0+330+fdc30075, php-snmp 8.0.30-8.el9_8.1, php-snmp 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-snmp 8.3.36-1.module_el9.8.0+330+fdc30075, php-soap 8.0.30-8.el9_8.1, php-soap 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-soap 8.3.36-1.module_el9.8.0+330+fdc30075, php-xml 8.0.30-8.el9_8.1, php-xml 8.1.32-1.module_el9.8.0+326+528679fc.alma.1, php-xml 8.3.36-1.module_el9.8.0+330+fdc30075.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Chainguard",
   "content_text": "Fixed versions: php-8.2 8.2.34-r4, php-8.3 8.3.35-r4, php-8.4 8.4.26-r4, php-8.5 8.5.11-r4.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/debian-12",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Debian:12",
   "content_text": "Fixed versions: php8.2 8.2.35-1~deb12u1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Debian:13",
   "content_text": "Fixed versions: php8.4 8.4.27-1~deb13u1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Debian:14",
   "content_text": "Fixed versions: php8.4 8.4.27-1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in openSUSE:Leap 16.0",
   "content_text": "Fixed versions: apache2-mod_php8 8.4.27-160000.1.1, php8 8.4.27-160000.1.1, php8-embed 8.4.27-160000.1.1, php8-fastcgi 8.4.27-160000.1.1, php8-fpm 8.4.27-160000.1.1, php8-test 8.4.27-160000.1.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in openSUSE:Tumbleweed",
   "content_text": "Fixed versions: matomo 5.14.2-1.1, php8 8.5.12-1.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Rocky Linux:10",
   "content_text": "Fixed versions: php 0:8.3.36-1.el10_2, php8.4 0:8.4.27-1.el10_2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Rocky Linux:8",
   "content_text": "Fixed versions: libzip 0:1.6.1-1.module+el8.10.0+1604+6558efc7, libzip 0:1.6.1-1.module+el8.10.0+1912+72767185, libzip 0:1.7.3-1.module+el8.10.0+1596+477f03f8, libzip 0:1.7.3-1.module+el8.10.0+1605+02e07af7, libzip 0:1.7.3-1.module+el8.10.0+1911+f499711e, php 0:7.4.33-8.module+el8.10.0+40393+c071e357, php 0:8.2.35-1.module+el8.10.0+40394+d21b33fb, php-pear 1:1.10.13-1.module+el8.10.0+1604+6558efc7, php-pear 1:1.10.13-1.module+el8.10.0+1605+02e07af7, php-pear 1:1.10.13-1.module+el8.10.0+1912+72767185, php-pear 1:1.10.14-1.module+el8.10.0+1596+477f03f8, php-pear 1:1.10.14-1.module+el8.10.0+1911+f499711e, php-pecl-apcu 0:5.1.18-1.module+el8.10.0+1604+6558efc7, php-pecl-apcu 0:5.1.18-1.module+el8.10.0+1912+72767185, php-pecl-apcu 0:5.1.23-1.module+el8.10.0+1596+477f03f8, php-pecl-apcu 0:5.1.23-1.module+el8.10.0+1911+f499711e, php-pecl-rrd 0:2.0.1-1.module+el8.10.0+1604+6558efc7, php-pecl-rrd 0:2.0.1-1.module+el8.10.0+1912+72767185, php-pecl-rrd 0:2.0.1-1.module+el8.4.0+414+2e7afcdd, php-pecl-rrd 0:2.0.3-1.module+el8.10.0+1596+477f03f8, php-pecl-rrd 0:2.0.3-1.module+el8.10.0+1605+02e07af7, php-pecl-rrd 0:2.0.3-1.module+el8.10.0+1911+f499711e, php-pecl-xdebug 0:2.9.5-1.module+el8.10.0+1604+6558efc7, php-pecl-xdebug 0:2.9.5-1.module+el8.10.0+1912+72767185, php-pecl-xdebug3 0:3.2.2-2.module+el8.10.0+1596+477f03f8, php-pecl-xdebug3 0:3.2.2-2.module+el8.10.0+1911+f499711e, php-pecl-zip 0:1.18.2-1.module+el8.10.0+1604+6558efc7, php-pecl-zip 0:1.18.2-1.module+el8.10.0+1912+72767185, php-pecl-zip 0:1.22.3-1.module+el8.10.0+1596+477f03f8, php-pecl-zip 0:1.22.3-1.module+el8.10.0+1911+f499711e.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Rocky Linux:9",
   "content_text": "Fixed versions: php 0:8.0.30-8.el9_8.1, php 0:8.2.35-1.module+el9.8.0+40395+2f706e64, php 0:8.3.36-1.module+el9.8.0+40396+4e680bb7, php-pecl-apcu 0:5.1.23-1.module+el9.7.0+40004+bf50a568, php-pecl-apcu 0:5.1.23-1.module+el9.7.0+40005+715283ec, php-pecl-redis6 0:6.1.0-3.module+el9.8.0+40203+35cc8ffc, php-pecl-rrd 0:2.0.3-4.module+el9.7.0+40003+454ed3c4, php-pecl-rrd 0:2.0.3-4.module+el9.7.0+40004+bf50a568, php-pecl-rrd 0:2.0.3-4.module+el9.7.0+40005+715283ec, php-pecl-xdebug3 0:3.2.2-2.module+el9.7.0+40004+bf50a568, php-pecl-xdebug3 0:3.3.1-1.module+el9.7.0+40005+715283ec, php-pecl-zip 0:1.22.3-1.module+el9.7.0+40004+bf50a568, php-pecl-zip 0:1.22.3-1.module+el9.7.0+40005+715283ec.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: apache2-mod_php8 8.0.30-150400.4.80.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: apache2-mod_php8 8.0.30-150400.4.80.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-module-for-legacy-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Module for Legacy 15 SP7",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, php7 7.4.33-150400.4.81.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-module-for-package-hub-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Module for Package Hub 15 SP7",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, php7 7.4.33-150400.4.81.1, php7-embed 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php7-test 7.4.33-150400.4.81.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-module-for-web-and-scripting-12",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Module for Web and Scripting 12",
   "content_text": "Fixed versions: php74 7.4.33-1.74.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-module-for-web-and-scripting-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Module for Web and Scripting 15 SP7",
   "content_text": "Fixed versions: apache2-mod_php8 8.3.36-150700.3.24.1, php8 8.3.36-150700.3.24.1, php8-embed 8.3.36-150700.3.24.1, php8-fastcgi 8.3.36-150700.3.24.1, php8-fpm 8.3.36-150700.3.24.1, php8-test 8.3.36-150700.3.24.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.2.35-150600.3.39.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.2.35-150600.3.39.1, php8-embed 8.2.35-150600.3.39.1, php8-fastcgi 8.2.35-150600.3.39.1, php8-fpm 8.2.35-150600.3.39.1, php8-test 8.2.35-150600.3.39.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server 16.0",
   "content_text": "Fixed versions: apache2-mod_php8 8.4.27-160000.1.1, php8 8.4.27-160000.1.1, php8-embed 8.4.27-160000.1.1, php8-fastcgi 8.4.27-160000.1.1, php8-fpm 8.4.27-160000.1.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.0.30-150400.4.80.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.0.30-150400.4.80.1, php8-embed 8.0.30-150400.4.80.1, php8-fastcgi 8.0.30-150400.4.80.1, php8-fpm 8.0.30-150400.4.80.1, php8-test 8.0.30-150400.4.80.2.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: apache2-mod_php7 7.4.33-150400.4.81.1, apache2-mod_php8 8.2.35-150600.3.39.1, php7 7.4.33-150400.4.81.1, php7-fastcgi 7.4.33-150400.4.81.1, php7-fpm 7.4.33-150400.4.81.1, php8 8.2.35-150600.3.39.1, php8-embed 8.2.35-150600.3.39.1, php8-fastcgi 8.2.35-150600.3.39.1, php8-fpm 8.2.35-150600.3.39.1, php8-test 8.2.35-150600.3.39.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in SUSE:Linux Enterprise Server for SAP applications 16.0",
   "content_text": "Fixed versions: apache2-mod_php8 8.4.27-160000.1.1, php8 8.4.27-160000.1.1, php8-embed 8.4.27-160000.1.1, php8-fastcgi 8.4.27-160000.1.1, php8-fpm 8.4.27-160000.1.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:22.04:LTS",
   "content_text": "Fixed versions: php8.1 8.1.2-1ubuntu2.28.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:24.04:LTS",
   "content_text": "Fixed versions: php8.3 8.3.6-0ubuntu0.24.04.13.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:26.04:LTS",
   "content_text": "Fixed versions: php8.5 8.5.4-0ubuntu1.5.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:26.10",
   "content_text": "Fixed versions: php8.5 8.5.9-0ubuntu2.1.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-pro-14.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:Pro:14.04:LTS",
   "content_text": "Fixed versions: php5 5.5.9+dfsg-1ubuntu4.29+esm18.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-pro-16.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:Pro:16.04:LTS",
   "content_text": "Fixed versions: php7.0 7.0.33-0ubuntu0.16.04.16+esm22.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-pro-18.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:Pro:18.04:LTS",
   "content_text": "Fixed versions: php7.2 7.2.24-0ubuntu0.18.04.17+esm14.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/ubuntu-pro-20.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Ubuntu:Pro:20.04:LTS",
   "content_text": "Fixed versions: php7.4 7.4.3-4ubuntu2.29+esm5.",
   "date_published": "2026-10-21T13:48:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-109618/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-109618/",
   "title": "CVE-2026-109618 fixed in Wolfi",
   "content_text": "Fixed versions: php-8.2 8.2.34-r4, php-8.3 8.3.35-r4, php-8.4 8.4.26-r4, php-8.5 8.5.11-r4.",
   "date_published": "2026-10-21T13:48:34Z"
  }
 ]
}