PHP Vulnerability Responses by Company

Red Hat

Global cloud / infrastructure
Aliases / services
レッドハット / RHEL / OpenShift / Red Hat
Official website
https://www.redhat.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Red Hat Enterprise Linux — PHP packages

Response status
Fixes available for listed streams
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides Red Hat Enterprise Linux, OpenShift, and related products.

Verified RHEL8 php:7.4 in RHSA-2026:87080 and PHP8.0 for applicable RHEL9.4 support channels in RHSA-2026:88725. Check other streams individually against product tables and errata.

Scope: RHEL7 is affected by CVE-2026-109619 but lacks the CVE-2026-109618 vulnerable code. This is not completion across every Red Hat product or stream.

What users should do

Match OS, support channel and PHP stream, install updates and restart workers. Rebuild containers from updated base images.

Official service URL

Source URLs

  1. RHSA-2026:87080 – php:7.4 security updatehttps://access.redhat.com/errata/RHSA-2026:87080Response evidence
  2. Red Hat CVE-2026-109618https://access.redhat.com/security/cve/cve-2026-109618Response evidence
  3. https://access.redhat.com/errata/RHSA-2026:88725https://access.redhat.com/errata/RHSA-2026:88725Service and operation documentation
  4. https://access.redhat.com/security/vulnerabilities/RHSB-2026-013https://access.redhat.com/security/vulnerabilities/RHSB-2026-013Service and operation documentation
Related official sources
  1. RHSA-2026:87080 – php:7.4 security updateOfficial notice
  2. Red Hat CVE-2026-109618Official notice

Comments