AWS Security ChangesHomeSearch

AWS lightsail: Lightsail changelog entry for PHP CVE remediation page

Service: lightsail · 2026-10-22 · Security-related high

File: lightsail/latest/userguide/document-history.md · CVE: CVE-2026-109618, CVE-2026-109619

Summary

Adds a document-history entry announcing a new page explaining how to update PHP on Lightsail, Bitnami, and Windows Server blueprint instances to address two critical PHP vulnerabilities.

Security assessment

The added changelog line explicitly names two critical PHP CVEs and documents new remediation guidance, directly addressing known vulnerabilities.

Evidence

+[Added guidance for updating PHP to address CVE-2026-109618 and CVE-2026-109619](https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-update-php-security-vulnerabilities.html)| Added a page that explains how to update PHP on instances created from Lightsail blueprints, Bitnami blueprints, and Windows Server blueprints to address two critical PHP vulnerabilities.| October 21, 2026

Diff

diff --git a/lightsail/latest/userguide/document-history.md b/lightsail/latest/userguide/document-history.md
index 722e287..603090c 100644
--- a//lightsail/latest/userguide/document-history.md
+++ b//lightsail/latest/userguide/document-history.md
@@ -15,0 +16 @@ Change| Description| Date
+[Added guidance for updating PHP to address CVE-2026-109618 and CVE-2026-109619](https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-update-php-security-vulnerabilities.html)| Added a page that explains how to update PHP on instances created from Lightsail blueprints, Bitnami blueprints, and Windows Server blueprints to address two critical PHP vulnerabilities.| October 21, 2026