check changelog for CVE-2026-109618 and CVE-2026-109619

zcat /usr/share/doc/php8.1-fpm/changelog.Debian.gz | grep -m3 -E "1096(18|19)"

Install / Update GPG Signature

sudo apt-get update
sudo apt-get -y install lsb-release ca-certificates curlsudo curl -sSLo /tmp/debsuryorg-archive-keyring.deb https://packages.sury.org/debsuryorg-archive-keyring.deb
sudo dpkg -i /tmp/debsuryorg-archive-keyring.deb
sudo sh -c 'echo "deb [signed-by=/usr/share/keyrings/debsuryorg-archive-keyring.gpg] https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list'
sudo apt-get update