Post

Can't understand why the PHP maintainers scheduled a security update about a vulnerability that was leaked and then was actively being exploited I'm pretty sure as one of the biggest technologies in the web, you could've you know, released a patch quickly

Scan@scanash.com

What a good day to not use the ancient language called PHP

Caesar

@caesar.dev

Unfortunately it takes time to get the patches packaged across all the different distros, and once it's released anywhere, everyone knows what the vuln is and can exploit it. It was supposed to be a coordinated release but it was leaked and the embargo was broken…

21/10/26, 10:13 pm0 reposts1 like

Scan

@scanash.com

When it was leaked, instead of scheduling the important update they should've released it as quickly as possible instead of forcing people to wait hours for it and allowing exploits to be developed faster than the update

Caesar

@caesar.dev

Agreed. At the point the embargo was broken they should have just gone ahead and released the patches immediately.