Patched PHP 7.4 RPMs for CentOS 7: PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Mitigation
PHP 7.x and CentOS 7 get no official PHP2Shell fix. Here are unofficial, signed-checksum RPMs of PHP 7.4.33 with the upstream minimal mitigation, how they were built, and how to verify and roll back.