PHP2Shell: Clouding’s Free Repository with Security Patches for PHP 5.6–8.5
At Clouding, we’ve developed a free PHP package repository containing security fixes for the critical PHP2Shell vulnerabilities.
Designed to make server updates easier, even for older PHP versions, this solution is available to the entire tech community.
Server security is a priority for any business or professional working with IT infrastructure. However, when a critical vulnerability is discovered, finding a quick, compatible solution isn’t always straightforward, especially when running older software versions.
That’s why, at Clouding, we wanted to do our part and make things a little easier for everyone working with PHP.
Our technical team has prepared a PHP package repository covering versions 5.6 through 8.5, with the security fixes needed to address the vulnerabilities known as PHP2Shell.
And we’ve done it with one clear goal: to make this resource available to anyone who needs it, whether they’re a Clouding customer or not.
👉 Access Clouding’s PHP Repository
What Is PHP2Shell and Why Is Updating PHP Important?
On October 21, 2026, two critical vulnerabilities in PHP were disclosed:
- CVE-2026-109618: a memory management vulnerability that could allow remote execution of malicious code.
- CVE-2026-109619: a vulnerability involving the use of freed memory and the persistence of certain internal states between requests, which could also allow remote code execution.
Both vulnerabilities, collectively known as PHP2Shell, may affect servers that use PHP to process web requests.
Their severity lies in the fact that, under certain conditions, an attacker could potentially execute code remotely without authentication.
In this situation, applying the appropriate security updates is essential to reduce the risk of exploitation.
However, there’s an additional challenge: not all PHP versions have updated packages available in commonly used repositories.
That’s where Clouding’s solution comes in.
One Repository Covering PHP Versions 5.6 Through 8.5
To make applying these fixes easier, our technical team has created a repository that brings together patched PHP packages for different versions and Linux distributions.
What Does This Repository Offer?
- PHP 5.6 to 8.5: packages containing PHP2Shell security fixes for a wide range of versions.
- Fixes for older versions: allows these security patches to be applied even to certain versions for which patched builds are no longer published in commonly used repositories.
- Updated and patched packages: we’ve rebuilt versions for which Ondřej Surý and Remi Collet no longer provide patched builds, using their source code. For current versions, we include mirrors of their original packages with the fixes applied.
- A single repository: we bring together the available packages to make them easier to find and update.
- Compatibility with multiple Linux distributions: includes .deb packages for Debian and Ubuntu, as well as RPM packages for distributions such as RHEL, AlmaLinux, Rocky Linux, Oracle Linux, and Fedora.
The repository continues to expand, with new combinations of Linux distributions and PHP versions being added as they are built and tested.
A Particularly Useful Solution for Older PHP Versions
One of the key benefits of this initiative is the ability to access security fixes for older PHP versions.
Many environments still run versions that are no longer officially supported or for which certain repositories have stopped providing updated builds.
Thanks to the work of our technical team, these systems can also access the specific PHP2Shell fixes, provided a compatible package is available in the repository.
It’s important to remember that these fixes address the vulnerabilities mentioned above, but they do not replace general maintenance or official PHP support. For security reasons, we recommend migrating to supported versions whenever possible.
How to Use Clouding’s PHP Repository
We’ve created a dedicated page to make accessing and installing the packages easier.
From this page, you can:
- Select your Linux distribution.
- Choose the PHP version you’re running.
- Check which packages are available for your environment.
- Follow the instructions to configure the repository and apply the corresponding updates.
To make the process even easier, the repository also provides update instructions and scripts tailored to supported configurations.
👉 Browse Available Packages and Set Up the PHP Repository
Can’t Find the Version or Package You Need?
We know every infrastructure is different, and requirements can vary from one environment to another.
That’s why we’re continuously working to expand the range of supported versions and distributions.
If you need a package that isn’t available yet, get in touch with our support team. We’ll look into the possibility of adding it to the repository.
You can reach us at [email protected].
A Clouding Initiative for the Entire Tech Community
At Clouding, we believe that providing great Cloud infrastructure also means anticipating users’ needs and sharing solutions that can make a difference.
That’s why we’ve decided to make this repository freely available to the entire tech community, with no requirement to be a Clouding customer.
Because we believe security is also built by sharing knowledge and solutions.
Find It Useful? Share It!
If you’re running PHP and need to apply these security fixes, we encourage you to explore the repository.
And if you know other professionals who could benefit from it, share this resource with them!
👉 Access Clouding’s Free PHP Repository
At Clouding, we’ll keep working to provide solutions that make your life easier, so you can focus on what really matters.
Leave a Reply