@jwildeboer@social.wildeboer.net
2026-10-21 08:20 UTC
I just checked all my servers and the installed containers and the minimal setup I use has paid of once again. No PHP anywhere. So I can relax and stick to my weekly update schedule. Sending sysadmin hugs to all folks out there dealing with getting the PHP updates installed and working :(
https://www.php.net/archive/2026.php#2026-10-20-1
#SysAdminLife @homelab
Replies (1)
-
@jwildeboer@social.wildeboer.net 2026-10-21 08:27
I will not link to sources and you don't have to trust me, but there are already exploits out there, one of them will get you a shell on servers running WordPress. So this is a critical update. CVE-2026-109618 and CVE-2026-109619 seem to affect all PHP versions going back to 5.4 and could result in RCE (Remote Code Execution). #SysAdminLife @homelab@fedigroups.social