Linux
php8.4 security updates
Patch Radar has 89 security fixes for php8.4, closing 40 CVEs, 2 of which are being exploited. The newest is RHSA-2026:87071 (8.4.27-1.el10_2), released October 24, 2026.
2 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
89
On record in Patch Radar
CVEs
40
Closed by those fixes
Exploited
2
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| Patch now | RHSA-2026:87071 | RHEL 10 | 8.4.27-1.el10_2 | 3 | 2 | Oct 24, 2026 |
| Patch now | DEBIAN-CVE-2026-109618 | Debian 13.5 (trixie) | 8.4.27-1~deb13u1 | 1 | 1 | Oct 21, 2026 |
| Patch now | DEBIAN-CVE-2026-109618 | Debian 14 | 8.4.27-1 | 1 | 1 | Oct 21, 2026 |
| Patch now | DEBIAN-CVE-2026-109619 | Debian 13.5 (trixie) | 8.4.27-1~deb13u1 | 1 | 1 | Oct 21, 2026 |
| Patch now | DEBIAN-CVE-2026-109619 | Debian 14 | 8.4.27-1 | 1 | 1 | Oct 21, 2026 |
| High | DEBIAN-CVE-2026-91765 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| High | DEBIAN-CVE-2026-91765 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91768 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91768 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-93682 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-93682 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91766 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91766 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-92842 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-92842 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-6103 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-6103 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91769 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91769 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91767 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2026-91767 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2025-14181 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2025-14181 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2025-1218 | Debian 14 | 8.4.26-1 | 1 | Sep 26, 2026 | |
| Routine | DEBIAN-CVE-2025-1218 | Debian 13.5 (trixie) | 8.4.26-1~deb13u1 | 1 | Sep 26, 2026 | |
| Urgent | RHSA-2026:56969 | RHEL 10 | 8.4.24-1.el10_2 | 2 | Aug 20, 2026 | |
| Urgent | DEBIAN-CVE-2026-17544 | Debian 13.5 (trixie) | 8.4.24-1~deb13u1 | 1 | Aug 1, 2026 | |
| Urgent | DEBIAN-CVE-2026-17544 | Debian 14 | 8.4.24-1 | 1 | Aug 1, 2026 | |
| Urgent | DEBIAN-CVE-2026-17543 | Debian 13.5 (trixie) | 8.4.24-1~deb13u1 | 1 | Aug 1, 2026 | |
| Urgent | DEBIAN-CVE-2026-17543 | Debian 14 | 8.4.24-1 | 1 | Aug 1, 2026 | |
| High | DEBIAN-CVE-2026-9672 | Debian 13.5 (trixie) | 8.4.24-1~deb13u1 | 1 | Aug 1, 2026 | |
| High | DEBIAN-CVE-2026-9672 | Debian 14 | 8.4.24-1 | 1 | Aug 1, 2026 | |
| Routine | DEBIAN-CVE-2026-7260 | Debian 13.5 (trixie) | 8.4.24-1~deb13u1 | 1 | Aug 1, 2026 | |
| Routine | DEBIAN-CVE-2026-7260 | Debian 14 | 8.4.24-1 | 1 | Aug 1, 2026 | |
| Routine | DEBIAN-CVE-2026-14355 | Debian 13.5 (trixie) | 8.4.23-1~deb13u1 | 1 | Jul 5, 2026 | |
| Routine | DEBIAN-CVE-2026-14355 | Debian 14 | 8.4.23-1 | 1 | Jul 5, 2026 | |
| Routine | RHSA-2026:49914 | RHEL 10 | 8.4.23-1.el10_2 | 1 | Jul 3, 2026 | |
| Routine | DEBIAN-CVE-2026-12184 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | Jul 3, 2026 | |
| Routine | DEBIAN-CVE-2026-12184 | Debian 14 | 8.4.21-1 | 1 | Jul 3, 2026 | |
| Urgent | DEBIAN-CVE-2026-6104 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-6104 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-6722 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-6722 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7262 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7262 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7568 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7568 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2025-14179 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2025-14179 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7258 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7258 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7263 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7263 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7261 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-7261 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-6735 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-6735 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-7259 | Debian 13.5 (trixie) | 8.4.21-1~deb13u1 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-7259 | Debian 14 | 8.4.21-1 | 1 | May 15, 2026 | |
| Urgent | RHSA-2026:22649 | RHEL 10 | 8.4.21-1.el10_2 | 8 | May 10, 2026 | |
| Urgent | php8.4 8.4.11-1ubuntu1.2 | Ubuntu 25.10 (questing) | 8.4.11-1ubuntu1.2 | 9 | May 9, 2026 | |
| High | php8.4 8.4.5-1ubuntu1.1 | Ubuntu 25.04 (plucky) | 8.4.5-1ubuntu1.1 | 3 | Jan 16, 2026 | |
| High | DEBIAN-CVE-2025-14180 | Debian 13.5 (trixie) | 8.4.16-1~deb13u1 | 1 | Dec 27, 2025 | |
| High | DEBIAN-CVE-2025-14180 | Debian 14 | 8.4.16-1 | 1 | Dec 27, 2025 | |
| High | DEBIAN-CVE-2025-14177 | Debian 14 | 8.4.16-1 | 1 | Dec 27, 2025 | |
| High | DEBIAN-CVE-2025-14178 | Debian 13.5 (trixie) | 8.4.16-1~deb13u1 | 1 | Dec 27, 2025 | |
| High | DEBIAN-CVE-2025-14178 | Debian 14 | 8.4.16-1 | 1 | Dec 27, 2025 | |
| High | php8.4 8.4.11-1ubuntu1.1 | Ubuntu 25.10 (questing) | 8.4.11-1ubuntu1.1 | 3 | Dec 27, 2025 | |
| High | DSA-6088-1 | Debian 13.5 (trixie) | 8.4.16-1~deb13u1 | 1 | Dec 21, 2025 | |
| High | DEBIAN-CVE-2025-1735 | Debian 13.5 (trixie) | 8.4.10-1 | 1 | Jul 13, 2025 | |
| High | DEBIAN-CVE-2025-1735 | Debian 14 | 8.4.10-1 | 1 | Jul 13, 2025 | |
| Routine | DEBIAN-CVE-2025-1220 | Debian 13.5 (trixie) | 8.4.10-1 | 1 | Jul 13, 2025 | |
| Routine | DEBIAN-CVE-2025-1220 | Debian 14 | 8.4.10-1 | 1 | Jul 13, 2025 | |
| Routine | DEBIAN-CVE-2025-6491 | Debian 13.5 (trixie) | 8.4.10-1 | 1 | Jul 13, 2025 | |
| Routine | DEBIAN-CVE-2025-6491 | Debian 14 | 8.4.10-1 | 1 | Jul 13, 2025 | |
| High | php8.4 8.4.11-1ubuntu1 | Ubuntu 25.10 (questing) | 8.4.11-1ubuntu1 | 3 | Jul 13, 2025 | |
| High | DEBIAN-CVE-2024-11235 | Debian 13.5 (trixie) | 8.4.5-1 | 1 | Apr 4, 2025 | |
| High | DEBIAN-CVE-2024-11235 | Debian 14 | 8.4.5-1 | 1 | Apr 4, 2025 | |
| High | DEBIAN-CVE-2025-1861 | Debian 13.5 (trixie) | 8.4.5-1 | 1 | Mar 30, 2025 | |
| High | DEBIAN-CVE-2025-1861 | Debian 14 | 8.4.5-1 | 1 | Mar 30, 2025 | |
| High | DEBIAN-CVE-2025-1736 | Debian 13.5 (trixie) | 8.4.5-1 | 1 | Mar 30, 2025 | |
| High | DEBIAN-CVE-2025-1736 | Debian 14 | 8.4.5-1 | 1 | Mar 30, 2025 | |
| Routine | DEBIAN-CVE-2025-1734 | Debian 13.5 (trixie) | 8.4.5-1 | 1 | Mar 30, 2025 | |
| Routine | DEBIAN-CVE-2025-1734 | Debian 14 | 8.4.5-1 | 1 | Mar 30, 2025 | |
| Routine | DEBIAN-CVE-2025-1219 | Debian 13.5 (trixie) | 8.4.5-1 | 1 | Mar 30, 2025 | |
| Routine | DEBIAN-CVE-2025-1219 | Debian 14 | 8.4.5-1 | 1 | Mar 30, 2025 | |
| Routine | DEBIAN-CVE-2025-1217 | Debian 13.5 (trixie) | 8.4.5-1 | 1 | Mar 29, 2025 | |
| Routine | DEBIAN-CVE-2025-1217 | Debian 14 | 8.4.5-1 | 1 | Mar 29, 2025 | |
| High | php8.4 8.4.5-1 | Ubuntu 25.04 (plucky) | 8.4.5-1 | 6 | Mar 14, 2025 |