# php8.4 security updates Patch Radar has 108 security fixes for php8.4, closing 40 CVEs, 2 of which are being exploited. The newest is ALAS2023-2026-3303 (8.4.27-1.amzn2023.0.1), released November 7, 2026. - Web page: https://patchblox.com/security/product/linux/php8.4 - Platform: Linux - Supported: yes ## Security fixes, newest first | Fix | Released | Fixed in | Priority | CVEs | Exploited | |---|---|---|---|---:|---:| | [ALAS2023-2026-3303](https://patchblox.com/security/data/fix/linux/alas2023-2026-3303.md) | Nov 7, 2026 | amzn 2023 8.4.27-1.amzn2023.0.1 | Patch now | 2 | 2 | | [ALAS2023-2026-3163](https://patchblox.com/security/data/fix/linux/alas2023-2026-3163.md) | Nov 7, 2026 | amzn 2023 8.4.26-1.amzn2023.0.1 | High | 10 | 0 | | [ELSA-2026-87071](https://patchblox.com/security/data/fix/linux/elsa-2026-87071.md) | Nov 7, 2026 | ol 10 0:8.4.27-1.el10_2 | Patch now | 3 | 2 | | [ALSA-2026:87071](https://patchblox.com/security/data/fix/linux/alsa-2026-87071.md) | Nov 7, 2026 | almalinux 10 8.4.27-1.el10_2 | Patch now | 3 | 2 | | [RLSA-2026:87071](https://patchblox.com/security/data/fix/linux/rlsa-2026-87071.md) | Nov 7, 2026 | rocky 10 0:8.4.27-1.el10_2 | Patch now | 3 | 2 | | [RHSA-2026:87071](https://patchblox.com/security/data/fix/linux/rhsa-2026-87071.md) | Oct 24, 2026 | RHEL 10 8.4.27-1.el10_2 | Patch now | 3 | 2 | | [DEBIAN-CVE-2026-109618](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109618.md) | Oct 21, 2026 | Debian 13.5 (trixie) 8.4.27-1~deb13u1 | Patch now | 1 | 1 | | [DEBIAN-CVE-2026-109618](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109618.md) | Oct 21, 2026 | Debian 14 8.4.27-1 | Patch now | 1 | 1 | | [DEBIAN-CVE-2026-109619](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109619.md) | Oct 21, 2026 | Debian 13.5 (trixie) 8.4.27-1~deb13u1 | Patch now | 1 | 1 | | [DEBIAN-CVE-2026-109619](https://patchblox.com/security/data/fix/linux/debian-cve-2026-109619.md) | Oct 21, 2026 | Debian 14 8.4.27-1 | Patch now | 1 | 1 | | [DEBIAN-CVE-2026-91765](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91765.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91765](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91765.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91768](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91768.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91768](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91768.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-93682](https://patchblox.com/security/data/fix/linux/debian-cve-2026-93682.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-93682](https://patchblox.com/security/data/fix/linux/debian-cve-2026-93682.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91766](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91766.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91766](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91766.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-92842](https://patchblox.com/security/data/fix/linux/debian-cve-2026-92842.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-92842](https://patchblox.com/security/data/fix/linux/debian-cve-2026-92842.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-6103](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6103.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-6103](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6103.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91769](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91769.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91769](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91769.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91767](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91767.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-91767](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91767.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14181](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14181.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14181](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14181.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1218](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1218.md) | Sep 26, 2026 | Debian 14 8.4.26-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1218](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1218.md) | Sep 26, 2026 | Debian 13.5 (trixie) 8.4.26-1~deb13u1 | High | 1 | 0 | | [RHSA-2026:56969](https://patchblox.com/security/data/fix/linux/rhsa-2026-56969.md) | Aug 20, 2026 | RHEL 10 8.4.24-1.el10_2 | Urgent | 2 | 0 | | [RLSA-2026:56969](https://patchblox.com/security/data/fix/linux/rlsa-2026-56969.md) | Aug 20, 2026 | rocky 10 0:8.4.24-1.el10_2 | Urgent | 2 | 0 | | [ALSA-2026:56969](https://patchblox.com/security/data/fix/linux/alsa-2026-56969.md) | Aug 19, 2026 | almalinux 10 8.4.24-1.el10_2 | Urgent | 3 | 0 | | [ELSA-2026-56969](https://patchblox.com/security/data/fix/linux/elsa-2026-56969.md) | Aug 19, 2026 | ol 10 0:8.4.24-1.el10_2 | Urgent | 2 | 0 | | [RLSA-2026:49914](https://patchblox.com/security/data/fix/linux/rlsa-2026-49914.md) | Aug 14, 2026 | rocky 10 0:8.4.23-1.el10_2 | High | 1 | 0 | | [ALSA-2026:49914](https://patchblox.com/security/data/fix/linux/alsa-2026-49914.md) | Aug 4, 2026 | almalinux 10 8.4.23-1.el10_2 | High | 1 | 0 | | [ELSA-2026-49914](https://patchblox.com/security/data/fix/linux/elsa-2026-49914.md) | Aug 4, 2026 | ol 10 0:8.4.23-1.el10_2 | High | 1 | 0 | | [ALAS2023-2026-2042](https://patchblox.com/security/data/fix/linux/alas2023-2026-2042.md) | Aug 3, 2026 | amzn 2023 8.4.24-1.amzn2023.0.1 | Urgent | 3 | 0 | | [DEBIAN-CVE-2026-17544](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17544.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-17544](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17544.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-17543](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17543.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-17543](https://patchblox.com/security/data/fix/linux/debian-cve-2026-17543.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-7260](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7260.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7260](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7260.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-9672](https://patchblox.com/security/data/fix/linux/debian-cve-2026-9672.md) | Aug 1, 2026 | Debian 13.5 (trixie) 8.4.24-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-9672](https://patchblox.com/security/data/fix/linux/debian-cve-2026-9672.md) | Aug 1, 2026 | Debian 14 8.4.24-1 | High | 1 | 0 | | [ALAS2023-2026-1959](https://patchblox.com/security/data/fix/linux/alas2023-2026-1959.md) | Jul 20, 2026 | amzn 2023 8.4.23-1.amzn2023.0.1 | High | 1 | 0 | | [ELSA-2026-22649](https://patchblox.com/security/data/fix/linux/elsa-2026-22649.md) | Jul 17, 2026 | ol 10 0:8.4.21-1.el10_2 | Urgent | 6 | 0 | | [DEBIAN-CVE-2026-14355](https://patchblox.com/security/data/fix/linux/debian-cve-2026-14355.md) | Jul 5, 2026 | Debian 13.5 (trixie) 8.4.23-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-14355](https://patchblox.com/security/data/fix/linux/debian-cve-2026-14355.md) | Jul 5, 2026 | Debian 14 8.4.23-1 | High | 1 | 0 | | [RHSA-2026:49914](https://patchblox.com/security/data/fix/linux/rhsa-2026-49914.md) | Jul 3, 2026 | RHEL 10 8.4.23-1.el10_2 | High | 1 | 0 | | [DEBIAN-CVE-2026-12184](https://patchblox.com/security/data/fix/linux/debian-cve-2026-12184.md) | Jul 3, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-12184](https://patchblox.com/security/data/fix/linux/debian-cve-2026-12184.md) | Jul 3, 2026 | Debian 14 8.4.21-1 | Routine | 1 | 0 | | [RLSA-2026:22649](https://patchblox.com/security/data/fix/linux/rlsa-2026-22649.md) | Jun 5, 2026 | rocky 10 0:8.4.21-1.el10_2 | Urgent | 6 | 0 | | [ALSA-2026:22649](https://patchblox.com/security/data/fix/linux/alsa-2026-22649.md) | Jun 2, 2026 | almalinux 10 8.4.21-1.el10_2 | Urgent | 8 | 0 | | [ALAS2023-2026-1726](https://patchblox.com/security/data/fix/linux/alas2023-2026-1726.md) | May 25, 2026 | amzn 2023 8.4.21-1.amzn2023.0.1 | Urgent | 10 | 0 | | [DEBIAN-CVE-2026-6104](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6104.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-6104](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6104.md) | May 15, 2026 | Debian 14 8.4.21-1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-6722](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6722.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-6722](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6722.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7262](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7262.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7262](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7262.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7568](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7568.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7568](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7568.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14179](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14179.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14179](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14179.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7258](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7258.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7258](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7258.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7263](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7263.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7263](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7263.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7261](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7261.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7261](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7261.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-6735](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6735.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-6735](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6735.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7259](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7259.md) | May 15, 2026 | Debian 13.5 (trixie) 8.4.21-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-7259](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7259.md) | May 15, 2026 | Debian 14 8.4.21-1 | High | 1 | 0 | | [RHSA-2026:22649](https://patchblox.com/security/data/fix/linux/rhsa-2026-22649.md) | May 10, 2026 | RHEL 10 8.4.21-1.el10_2 | Urgent | 8 | 0 | | [php8.4 8.4.11-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-php8.4-8.4.11-1ubuntu1.2.md) | May 9, 2026 | Ubuntu 25.10 (questing) 8.4.11-1ubuntu1.2 | Urgent | 9 | 0 | | [php8.4 8.4.5-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-php8.4-8.4.5-1ubuntu1.1.md) | Jan 16, 2026 | Ubuntu 25.04 (plucky) 8.4.5-1ubuntu1.1 | High | 3 | 0 | | [ALAS2023-2025-1352](https://patchblox.com/security/data/fix/linux/alas2023-2025-1352.md) | Jan 7, 2026 | amzn 2023 8.4.16-1.amzn2023.0.1 | High | 3 | 0 | | [DEBIAN-CVE-2025-14180](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14180.md) | Dec 27, 2025 | Debian 13.5 (trixie) 8.4.16-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14180](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14180.md) | Dec 27, 2025 | Debian 14 8.4.16-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14177](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14177.md) | Dec 27, 2025 | Debian 14 8.4.16-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14178](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14178.md) | Dec 27, 2025 | Debian 13.5 (trixie) 8.4.16-1~deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2025-14178](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14178.md) | Dec 27, 2025 | Debian 14 8.4.16-1 | High | 1 | 0 | | [php8.4 8.4.11-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-php8.4-8.4.11-1ubuntu1.1.md) | Dec 27, 2025 | Ubuntu 25.10 (questing) 8.4.11-1ubuntu1.1 | High | 3 | 0 | | [DSA-6088-1](https://patchblox.com/security/data/fix/linux/dsa-6088-1.md) | Dec 21, 2025 | Debian 13.5 (trixie) 8.4.16-1~deb13u1 | High | 1 | 0 | | [ALAS2023-2025-1113](https://patchblox.com/security/data/fix/linux/alas2023-2025-1113.md) | Jul 26, 2025 | amzn 2023 8.4.10-1.amzn2023.0.1 | High | 3 | 0 | | [DEBIAN-CVE-2025-1735](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1735.md) | Jul 13, 2025 | Debian 13.5 (trixie) 8.4.10-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1735](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1735.md) | Jul 13, 2025 | Debian 14 8.4.10-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1220](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1220.md) | Jul 13, 2025 | Debian 13.5 (trixie) 8.4.10-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1220](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1220.md) | Jul 13, 2025 | Debian 14 8.4.10-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-6491](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6491.md) | Jul 13, 2025 | Debian 13.5 (trixie) 8.4.10-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-6491](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6491.md) | Jul 13, 2025 | Debian 14 8.4.10-1 | High | 1 | 0 | | [php8.4 8.4.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-php8.4-8.4.11-1ubuntu1.md) | Jul 13, 2025 | Ubuntu 25.10 (questing) 8.4.11-1ubuntu1 | High | 3 | 0 | | [DEBIAN-CVE-2024-11235](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11235.md) | Apr 4, 2025 | Debian 13.5 (trixie) 8.4.5-1 | High | 1 | 0 | | [DEBIAN-CVE-2024-11235](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11235.md) | Apr 4, 2025 | Debian 14 8.4.5-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1861](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1861.md) | Mar 30, 2025 | Debian 13.5 (trixie) 8.4.5-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1861](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1861.md) | Mar 30, 2025 | Debian 14 8.4.5-1 | High | 1 | 0 | | [DEBIAN-CVE-2025-1736](https://patchblox.com/security/data/fix/linux/debian-cve-2025-1736.md) | Mar 30, 2025 | Debian 13.5 (trixie) 8.4.5-1 | High | 1 | 0 | Showing the newest 100 of 108 fixes. --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo