Advisories » MGASA-2026-0530

Updated php8.4 & php8.5 packages fix security vulnerabilities

Publication date: 22 Oct 2026
Modification date: 22 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-109618 , CVE-2026-109619

Description

Two critical PHP vulnerabilities that can allow unauthenticated remote code
execution have been fixed.  The updated packages should be installed as soon
as possible.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36558
• https://www.php.net/archive/2026.php#2026-10-21-5
• https://www.cve.org/CVERecord?id=CVE-2026-109618
• https://www.cve.org/CVERecord?id=CVE-2026-109619

SRPMS

10/core

• php8.4-8.4.27-1.1.mga10
• php8.5-8.5.12-1.mga10