# php8.4 security updates

Patch Radar has 89 security fixes for php8.4, closing 40 CVEs, 2 of which are being exploited. The newest is RHSA-2026:87071 (8.4.27-1.el10_2), released October 24, 2026.

- Web page: https://patchblox.com/security/product/linux/php8.4
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [RHSA-2026:87071](https://patchblox.com/security/data/fix/linux/rhsa-2026-87071.md) | Oct 24, 2026 | RHEL 10 8.4.27-1.el10_2 | Patch now | 3 | 2 |
| [DEBIAN-CVE-2026-109618](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109618.md) | Oct 21, 2026 | Debian 13.5 (trixie) 8.4.27-1~deb13u1 | Patch now | 1 | 1 |
| [DEBIAN-CVE-2026-109618](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109618.md) | Oct 21, 2026 | Debian 14 8.4.27-1 | Patch now | 1 | 1 |
| [DEBIAN-CVE-2026-109619](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109619.md) | Oct 21, 2026 | Debian 13.5 (trixie) 8.4.27-1~deb13u1 | Patch now | 1 | 1 |
| [DEBIAN-CVE-2026-109619](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109619.md) | Oct 21, 2026 | Debian 14 8.4.27-1 | Patch now | 1 | 1 |
| [DEBIAN-CVE-2026-91765](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91765.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-91765](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91765.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-91768](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91768.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-91768](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91768.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-93682](https://patchblox.com/security/data/fix/linux/debian-cve-2026-93682.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-93682](https://patchblox.com/security/data/fix/linux/debian-cve-2026-93682.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-91766](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91766.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-91766](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91766.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-92842](https://patchblox.com/security/data/fix/linux/debian-cve-2026-92842.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-92842](https://patchblox.com/security/data/fix/linux/debian-cve-2026-92842.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6103](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6103.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6103](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6103.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-91769](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91769.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-91769](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91769.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-91767](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91767.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-91767](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91767.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-14181](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14181.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-14181](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14181.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1218](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1218.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1218](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1218.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | Routine | 1 | 0 |
| [RHSA-2026:56969](https://patchblox.com/security/data/fix/linux/rhsa-2026-56969.md) | Aug 20, 2026 | RHEL 10 8.4.24-1.el10_2 | Urgent | 2 | 0 |
| [DEBIAN-CVE-2026-17544](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17544.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-17544](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17544.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-17543](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17543.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-17543](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17543.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-9672](https://patchblox.com/security/data/fix/linux/debian-cve-2026-9672.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-9672](https://patchblox.com/security/data/fix/linux/debian-cve-2026-9672.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7260](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7260.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-7260](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7260.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-14355](https://patchblox.com/security/data/fix/linux/debian-cve-2026-14355.md) | Jul 5, 2026 | Debian 13.5 (trixie) 8.4.23-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-14355](https://patchblox.com/security/data/fix/linux/debian-cve-2026-14355.md) | Jul 5, 2026 | Debian 14 8.4.23-1 | Routine | 1 | 0 |
| [RHSA-2026:49914](https://patchblox.com/security/data/fix/linux/rhsa-2026-49914.md) | Jul 3, 2026 | RHEL 10 8.4.23-1.el10_2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-12184](https://patchblox.com/security/data/fix/linux/debian-cve-2026-12184.md) | Jul 3, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-12184](https://patchblox.com/security/data/fix/linux/debian-cve-2026-12184.md) | Jul 3, 2026 | Debian 14 8.4.21-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6104](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6104.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-6104](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6104.md) | May 15, 2026 | Debian 14 8.4.21-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-6722](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6722.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6722](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6722.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7262](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7262.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7262](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7262.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7568](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7568.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7568](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7568.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-14179](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14179.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-14179](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14179.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7258](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7258.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7258](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7258.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7263](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7263.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7263](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7263.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7261](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7261.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-7261](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7261.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6735](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6735.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6735](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6735.md) | May 15, 2026 | Debian 14 8.4.21-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-7259](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7259.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-7259](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7259.md) | May 15, 2026 | Debian 14 8.4.21-1 | Routine | 1 | 0 |
| [RHSA-2026:22649](https://patchblox.com/security/data/fix/linux/rhsa-2026-22649.md) | May 10, 2026 | RHEL 10 8.4.21-1.el10_2 | Urgent | 8 | 0 |
| [php8.4 8.4.11-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-php8.4-8.4.11-1ubuntu1.2.md) | May 9, 2026 | Ubuntu 25.10 (questing) 8.4.11-1ubuntu1.2 | Urgent | 9 | 0 |
| [php8.4 8.4.5-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-php8.4-8.4.5-1ubuntu1.1.md) | Jan 16, 2026 | Ubuntu 25.04 (plucky) 8.4.5-1ubuntu1.1 | High | 3 | 0 |
| [DEBIAN-CVE-2025-14180](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14180.md) | Dec 27, 2025 | Debian 13.5 (trixie) 8.4.16-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-14180](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14180.md) | Dec 27, 2025 | Debian 14 8.4.16-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-14177](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14177.md) | Dec 27, 2025 | Debian 14 8.4.16-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-14178](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14178.md) | Dec 27, 2025 | Debian 13.5 (trixie) 8.4.16-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-14178](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14178.md) | Dec 27, 2025 | Debian 14 8.4.16-1 | High | 1 | 0 |
| [php8.4 8.4.11-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-php8.4-8.4.11-1ubuntu1.1.md) | Dec 27, 2025 | Ubuntu 25.10 (questing) 8.4.11-1ubuntu1.1 | High | 3 | 0 |
| [DSA-6088-1](https://patchblox.com/security/data/fix/linux/dsa-6088-1.md) | Dec 21, 2025 | Debian 13.5 (trixie) 8.4.16-1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1735](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1735.md) | Jul 13, 2025 | Debian 13.5 (trixie) 8.4.10-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1735](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1735.md) | Jul 13, 2025 | Debian 14 8.4.10-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1220](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1220.md) | Jul 13, 2025 | Debian 13.5 (trixie) 8.4.10-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1220](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1220.md) | Jul 13, 2025 | Debian 14 8.4.10-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-6491](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6491.md) | Jul 13, 2025 | Debian 13.5 (trixie) 8.4.10-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-6491](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6491.md) | Jul 13, 2025 | Debian 14 8.4.10-1 | Routine | 1 | 0 |
| [php8.4 8.4.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-php8.4-8.4.11-1ubuntu1.md) | Jul 13, 2025 | Ubuntu 25.10 (questing) 8.4.11-1ubuntu1 | High | 3 | 0 |
| [DEBIAN-CVE-2024-11235](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11235.md) | Apr 4, 2025 | Debian 13.5 (trixie) 8.4.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-11235](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11235.md) | Apr 4, 2025 | Debian 14 8.4.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1861](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1861.md) | Mar 30, 2025 | Debian 13.5 (trixie) 8.4.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1861](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1861.md) | Mar 30, 2025 | Debian 14 8.4.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1736](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1736.md) | Mar 30, 2025 | Debian 13.5 (trixie) 8.4.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1736](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1736.md) | Mar 30, 2025 | Debian 14 8.4.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-1734](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1734.md) | Mar 30, 2025 | Debian 13.5 (trixie) 8.4.5-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1734](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1734.md) | Mar 30, 2025 | Debian 14 8.4.5-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1219](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1219.md) | Mar 30, 2025 | Debian 13.5 (trixie) 8.4.5-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1219](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1219.md) | Mar 30, 2025 | Debian 14 8.4.5-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1217](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1217.md) | Mar 29, 2025 | Debian 13.5 (trixie) 8.4.5-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-1217](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1217.md) | Mar 29, 2025 | Debian 14 8.4.5-1 | Routine | 1 | 0 |
| [php8.4 8.4.5-1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-php8.4-8.4.5-1.md) | Mar 14, 2025 | Ubuntu 25.04 (plucky) 8.4.5-1 | High | 6 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo