PHP CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)

Hello,

We actively verify the releases updates available, and we are ont time to cover the issue, sample :

rpm -q --changelog ea-php70-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php71-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php72-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php73-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php80-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php81-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php82-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php83-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php84-php-cli | grep -m1 CVE-2026-109618

rpm -q --changelog ea-php85-php-cli | grep -m1 CVE-2026-109618

- EA4D-1101: CVE-2026-109618, CVE-2026-109619: backport of upstream's PHP 7.4 EO L

- EA4D-1101: CVE-2026-109618, CVE-2026-109619: security hardening in the memory

url_scanner_ex.c and ext/json/json_scanner.c for the CVE-2026-109618/109619 pa tch: el7/el8 re2c 0.14.3

- EA4D-1101: CVE-2026-109618, CVE-2026-109619: do not bail out from inside the

Europe