192
PSA: PHP warns it plans to release 2 emergency patches imminently (today 14:00 UTC) (arstechnica.com)
submitted 11 hours ago* (last edited 3 hours ago) by to c/selfhosted@lemmy.world
41 comments fedilink hide all child comments
 

The set of vulnerabilities is dubbed PHP2Shell and disclosure is scheduled for 14:00 UTC with attacks expected to follow soon after.

It is adviced to take offline every non-vital services until the patch has been installed (or the Docker image has been updated with a patched version of PHP)

Update: fix is out https://www.php.net/archive/2026.php#2026-10-21-5

other discussions
109
PHP warns it plans to release 2 emergency patches imminently (arstechnica.com)
submitted 7 hours ago by to c/technology@lemmy.world
15 comments fedilink hide all child comments
14
PHP warns it plans to release 2 emergency patches imminently (arstechnica.com)
submitted 7 hours ago by to c/technology@midwest.social
comment fedilink hide all child comments
 

PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.