• Vulnerability/
  • https://reddit.com/r/sysadmin/comments/1xdwx05/php2shell_dnf_checkupdate_showed_nothing_on_our/

https://reddit.com/r/sysadmin/comments/1xdwx05/php2shell_dnf_checkupdate_showed_nothing_on_our/: PHP2Shell: dnf check-update showed nothing on our RHEL 8 Zabbix web server. Here’s why and what we did

Published Oct 24, 2026
·
Updated

Affected Software

1 affected component
PHP PHP=8.0.30

Frequently Asked Questions

1

Why did the PHP update check return no available packages?

BaseOS and AppStream, the repositories that could provide PHP updates, were disabled. An empty result from dnf check-update only reflected the repositories visible to DNF and did not establish that the installed PHP version was current or fixed.

2

Was a vendor-provided fix for the installed PHP stream confirmed?

No. The review did not verify Red Hat advisories for the php:8.0 stream, so it was not determined whether a fix was available from that source.

3

What checks were performed before moving to another PHP stream?

A dry-run update was used to confirm that PHP 8.3.36 would be selected, dependencies resolved successfully, and no Zabbix or other core packages would be removed. Zabbix 7.0.29 was identified as supporting PHP 8.3.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203