GoLearn | Urgent Patching

Scheduled Maintenance Report for Gladstone Software

Completed

The scheduled maintenance has been completed.

Posted Oct 21, 2026 - 21:00 UTC

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Oct 21, 2026 - 18:00 UTC

Scheduled

GoLearn is undergoing urgent patching to address critical vulnerabilities. These are rolling updates and no downtime is expected.

We are addressing the following issues:

RCE via OOM corruption, CVE-2026-109618 (GHSA-w8hw-w9fx-j79w): out-of-memory handling can interrupt PHP while internal request data is only partially initialized. Request cleanup may then treat the invalid data as valid.
RCE via stale global state, CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp): request-owned internal state can survive after its backing memory has been freed. A later request handled by the same worker may use that stale state before normal initialization resets it.

Posted Oct 21, 2026 - 17:51 UTC

This scheduled maintenance affected: External Suppliers (GoLearn).