On October 20, 2026, details of two critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) became publicly available ahead of their scheduled disclosure.

All PHP versions available on our hosting platform have now been patched against both vulnerabilities.

We have deployed the official security updates for PHP 8.2 and newer (PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35), as well as security patches for older PHP versions, including legacy releases.

All updates have been applied server-wide, and no action is required from customers to address these specific vulnerabilities.

Using mod_deflate

Mod_deflate is a module for the Apache Web Server. Its purpose is to make a better use of the available bandwidth by compressing content delivered from the web server to the client's browser. The compression is automatic, and the only requirement is that the browser supports GZIP compression. Nowadays, most of the browsers support GZIP, and no additional software is required.

How is the compression performed?

The browser will announce if the compression method is supported when sending a request to the server for a specific file, for instance, http://www.example_domain.com/index.html. In case Apache is configured with mod_deflate, the content of index.html will be compressed and sent to the browser. The browser, on the other hand will decompress the GZIP file and will display it to the client as a simple HTML file. The web visitor would not be aware of the above operations.

How can I use mod_deflate?

To set up mod_deflate, you have to create an .htaccess file (note the dot (".") at the beginning of the file) with the following code in it:

<IfModule deflate_module>
    AddOutputFilterByType DEFLATE text/css text/csv text/html text/plain text/richtext text/sgml text/tab-separated-values application/javascript application/x-javascript httpd/unix-directory
    AddOutputFilter DEFLATE html htm shtml php php4 pl rb py cgi css js txt
    BrowserMatch ^Mozilla/4 gzip-only-text/html
    BrowserMatch ^Mozilla/4\.0[678] no-gzip
    BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
</IfModule>
Then save the .htaccess file to the directory where you want mod_deflate enabled. Have in mind that .htaccess files work recursively, so they have effect on all the subdirectories as well.

The .htaccess file above will have mod_deflate enabled for all HTML, SSI, PHP, Perl, Ruby, Python, CGI, Cascading Style Sheets (CSS), JavaScript, and text files.