Security-focused PHP rebuilds for BlueOnyx 5209R (EOL) and Aventurin{e} 6109R (EOL)
Admins still on 5209R (EOL): Rebuilt PHP packages fix the PHP-2-Shell vulnerability. 5209R and 6109R remain end of life - please plan migration to 5211R or 5212R - or Aventurin{e} 6110R.
We have prepared updated packages for the additional PHP stacks used on BlueOnyx 5209R (EOL). These builds include fixes for the recently disclosed PHP-2-Shell issue and are intended to help administrators who still have a BlueOnyx 5209R (EOL) server in service protect that installation while they arrange its migration of CVE-2026-109618 and CVE-2026-109619.
The available package now available in the Shop and on NewLinQ versions are:
- PHP 8.3.36-99
- PHP 8.2.35-99
- PHP 8.1.34-99
- PHP 8.0.30-99
- PHP 7.4.33-99
- PHP 7.3.33-99
- PHP 7.2.34-99
- PHP 7.1.33-99
- PHP 7.0.33-99
- PHP 5.6.40-99
- PHP 5.5.38-99
- PHP 5.4.45-99
These are rebuilds for the separate PHP stacks under /home/solarspeed/php-* on BlueOnyx 5209R (EOL). They are not a return to upstream support for these old PHP branches, and installing them does not make an end-of-life operating system safe or supported. The builds were made for the libraries and capabilities available on CentOS 7, without introducing new runtime package dependencies.
Free PHP-5.4.16 (PHPOS) for BlueOnyx 5209R and Aventurin{e} 6109R
Additionally a free 5209R-PHPOS-5.4.16-49 has been released that is available for BlueOnx 5209R and Aventurin{e} 6109R free of charge and without NewLinQ subscription. That PKG contains a rebuilt version of the OS provided PHP-5.4.45 that has been patched with fixes against CVE-2026-109618 and CVE-2026-109619.
This PHP5.4.16-49 is used by the OS itself as well as the BlueOnyx or Aventurin{e} 6109R GUI.
BlueOnyx 5209R reached end of life on June 30, 2024
BlueOnyx 5209R is based on CentOS 7, which has reached end of life since June 30, 2024. It no longer receives regular maintenance or security updates and should have been retired long ago. This PHP rebuild is a limited response to a specific security situation for systems that remain in operation; it is not an extension of the 5209R support lifecycle.
We do not encourage continued operation of BlueOnyx 5209R. Please make a migration plan and move to a maintained release: BlueOnyx Easy-Migrate can help you migrate to BlueOnyx 5211R or BlueOnyx 5212R. Read the 5209R and CentOS 7 end-of-life announcement for the background and lifecycle details.
Helping existing installations through the transition
We know that some administrators still depend on BlueOnyx 5209R or Aventurin{e} 6109R and cannot migrate overnight. We do not want to leave those systems without help during this security issue. These PHP packages provide a practical, limited update for that transition period. Please install the package matching the PHP stack you use, test your applications, and continue with migration to BlueOnyx 5211R or 5212R (or Aventurin{e} 6110R) as soon as you can.