2026-10-21 16:33 UTC
So is AWS gonna push a php update, or are we just YOLO-ing it now?
Replies (2)
-
@jwz@mastodon.social 2026-10-21 19:10
Since AWS is feeling lackadaisical about all this... Is it believed that putting this in my php-fpm pools is sufficient? ; CVE-2026-109618 php_admin_value[memory_limit] = -1 php_admin_value[post_max_size] = 32M php_admin_value[upload_max_filesize] = 16M ; CVE-2026-109619 php_admin_value[session.upload_progress.enabled] = 0 php_admin_value[max_file_uploads] = 20 php_admin_value[fatal_error_backtraces] = 0
-
@jwz@mastodon.social 2026-10-22 01:10
Amazon just pushed out 2023.12.20261021 but it does *not* fix CVE-2026-109618 and CVE-2026-109619 so that's cool, cool. No hurry, guys. https://explore.alas.aws.amazon.com