RSS Feed/News Heads up - critical PHP patch needed tomorrow for all servers

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
34,175
Points
823

Reputation:

Be prepared to update your PHP tomorrow as there'll be a patch for a 10.0 level CVE tomorrow. PHP.net is not releasing details until then.

php.net is intermittently not responding so here is a screenshot of their latest message.

1792560985405.webp

Proof of concept attack:
https://jackalsyn.com/posts/php-up-2026.html
I contacted the authors of this PoC on X and they tell me it's purposefully crippled.
However the mitigation advice looks good

Here's how you'd apply those mitigations...

Read more

Continue reading...
 
Status
Not open for further replies.
Top