Official account for all things Red Hat Security. For product security issues, contact secalert@redhat.com. For security incidents, contact infosec@redhat.com.
Important memory corruption flaws in PHP's request handling have been identified: CVE-2026-109618 and CVE-2026-109619. Red Hat is expediting fixes, with some updates already available. The latest updates are available here:
