Rolling out release 2026_043 (additional security release)

Scheduled Maintenance Report for Flying Circus

Completed

The changelog is available here: https://doc.flyingcircus.io/platform/changes/2026/r043.html.

VMs using the lamp or mailserver role have been updated by us. Other VMs and machines will schedule updates in the regular maintenance window. The maintenance reboot to activate the kernel changes take place in a maintenance window for all VMs.

Posted Oct 21, 2026 - 21:14 CEST

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Oct 21, 2026 - 17:45 CEST

Scheduled

Release 2026_043 will be rolled out during the specified timeframe.

This release fixes

- PHP CVEs CVE-2026-109618, CVE-2026-109619
- leaked/insecure emSign eMudhra TLS private key -> blacklist affected CAs CVE-2026-111943
- Linux Kernel CVE-2026-99999 (26.05 only)

This release is done for 26.05 and 25.11. A detailed changelog will be published later in the evening.

Note: releases themselves do not cause downtimes. If a change within a release requires downtime then every VM that is affected will schedule a maintenance period according to your projects' preferences and notify you with specific details about the downtime.

**This release will be rolled out manually for some hosts**

Posted Oct 21, 2026 - 17:19 CEST

This scheduled maintenance affected: Central services.