BlueOnyx has released new installation media for its three active RHEL-based control-panel lines—5210R, 5211R, and 5212R—just nine days after the previous update to address two critical security vulnerabilities: "php2shell" and "PwnEscape." The new images incorporate patched PHP versions, updated AlmaLinux kernels, and enhanced PHP-FPM isolation, ensuring that fresh server installations are secure from the outset. Additionally, the release improves the first-boot experience by fixing various installation bugs, streamlining the setup process for users. While existing users can apply the security patches via RPM updates, the new media is particularly beneficial for new deployments, offering a stronger initial security posture and a smoother installation experience
BlueOnyx Updates Install Media for 5210R, 5211R and 5212R After php2shell and PwnEscape Security Fixes
BlueOnyx shipped new installation media for its three active RHEL-based control-panel lines, 5210R, 5211R and 5212R, today, a rare nine-day turnaround. The accelerated release closes two critical holes: the "php2shell" PHP remote-code-execution pair (CVE-2026-109618 and CVE-2026-109619) and the PwnEscape guest-to-host VM-escape flaw (CVE-2026-99999). New images bundle patched PHP, patched AlmaLinux kernels and hardened per-site PHP-FPM isolation, so a fresh server starts protected instead of requiring later patching. The same release also overhauls the first-boot experience, fixing installer wizard loops, session-cache bugs and boot-time service failures that used to trip up cold installs.
