<![CDATA[PHP Vulnerability Question]]>Do the new PHP Vulnerabilities’ CVE-2026-109618 (RCE via OOM corruption) and CVE-2026-109619 (RCE via stale global state) apply to FOG? And if so, will there be a patch?

]]>http://forums.fogproject.org/topic/18288/php-vulnerability-questionRSS for NodeThu, 22 Oct 2026 22:42:13 GMTThu, 22 Oct 2026 19:54:36 GMT60<![CDATA[Reply to PHP Vulnerability Question on Thu, 22 Oct 2026 22:24:50 GMT]]>@gleckey no patch would be necessary for FOG. The PHP vulnerability applies to PHP packages, not to fog.

Now, you can update the packages using your OS package management, or you can rerun the installer for FOG which also tries to update any of the packages FOG may need. Either option will work.

]]>http://forums.fogproject.org/post/158893http://forums.fogproject.org/post/158893Thu, 22 Oct 2026 22:24:50 GMT