CloudLinux PHP patch rollout puts timing under scrutiny
A post on r/PHP asks why CloudLinux is listing patches for PHP 7.4 and 8.0 before updates for 8.2 through 8.5. The discussion concerns CVE-2026-109618 and CVE-2026-109619. The author says official PHP security releases became available at 14:00 UTC and cPanel had patched EA-PHP. The excerpt contains no explanation from CloudLinux.
Comments
No comments yet — be the first.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.