Canonical Ltd.

Ubuntu official PHP packages (22.04 / 24.04 / 26.04 / 26.10)

Response status

Fixed packages released

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides Ubuntu and enterprise support.

USN-8948-1 announces fixed PHP packages for Ubuntu 22.04/24.04/26.04/26.10.

Scope: Applies to Ubuntu packages in USN-8948-1, not custom builds or third-party repositories. Older Pro releases are a separate scope.

What users should do

Install the corrected distribution packages and restart affected PHP services. Verify the full revision against the USN.

Official service URL

• https://canonical.com/

Source URLs

1. USN-8948-1: PHP vulnerabilitieshttps://ubuntu.com/security/notices/USN-8948-1Response evidence
2. https://ubuntu.com/security/notices/USN-8948-2https://ubuntu.com/security/notices/USN-8948-2Service and operation documentation
3. https://ubuntu.com/blog/php2shell-vulnerability-fixes-availablehttps://ubuntu.com/blog/php2shell-vulnerability-fixes-availableService and operation documentation

Ubuntu Pro / Legacy Support PHP (14.04–20.04 LTS)

Response status

Fixed packages with required coverage

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

18.04/20.04 fixes require Pro;14.04/16.04 require Pro plus Legacy Support.

Scope: Official older-LTS Ubuntu packages only; verify custom builds and external repositories separately.

What users should do

Enable the appropriate repository/coverage, install the USN-8948-2 packages and restart PHP services.

Source URLs

1. https://ubuntu.com/security/notices/USN-8948-2https://ubuntu.com/security/notices/USN-8948-2Response evidence