TI-2026-78794 CVE-2026-109619
PHP remote code execution via stale global state
Priority CRITICAL 99KEV
PHP has various global state that temporarily points into request memory.
RHSA-2026:89111
php:8.3 security update
Released 2026-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.6) apcu-panel-5.1.23-1.module+el9.6.0+22647+1741ae35.noarch::php:8.3, php-8.3.19-1.module+el9.6.0+25160+f8b750a4.3.aarch64::php:8.3, php-8.3.19-1.module+el9.6.0+25160+f8b750a4.3.ppc64le::php:8.3 +47
Fixes 2 records
Priority CRITICAL 99KEV
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request.