PHP Vulnerability Question

[gleckey]

Do the new PHP Vulnerabilities’ CVE-2026-109618 (RCE via OOM corruption) and CVE-2026-109619 (RCE via stale global state) apply to FOG? And if so, will there be a patch?

[Tom Elliott]

@gleckey no patch would be necessary for FOG. The PHP vulnerability applies to PHP packages, not to fog.

Now, you can update the packages using your OS package management, or you can rerun the installer for FOG which also tries to update any of the packages FOG may need. Either option will work.