We are continuing to monitor for any further issues.
Posted Oct 25, 2026 - 18:56 AEDT
Monitoring
Update: Further Security Patches to be Deployed for PHP Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)
Previous versions were backported. The new releases will show the updated versions.
We have deployed security updates across our hosting environment to address the recent PHP vulnerabilities.
Before the official PHP updates were even released, we deployed custom Web Application Firewall (WAF) rules to inspect and protect the portal against these exploits.
These servers now receive the full PHP patches outlined below.
ea-php builds with the PHP.net version numbers are now in the stable repositories: - ea-php82: 8.2.35-1 - ea-php83: 8.3.36-1 - ea-php84: 8.4.27-1 - ea-php85: 8.5.12-1