Post

Aditya Mukerjee 🦦 🏳️‍🌈
@chimeracoder.bsky.social

As far as I can tell, the AWS Lightsail blueprints for WordPress are still not updated, and they are not self-servicable within the instance. Is this correct? I cannot find any information on when (or if) AWS plans to update the WordPress blueprints they provide.

Aditya Mukerjee 🦦 🏳️‍🌈
@chimeracoder.bsky.social

I am literally a security professional and I am having trouble finding clear, unambiguous info about *how* to update this, and what level of support to expect from AWS/others. WordPress powers 40% of the Internet, and I cannot imagine how the average site operator can be expected to handle this.

1 repost7 likes

Aditya Mukerjee 🦦 🏳️‍🌈
@chimeracoder.bsky.social

AFAICT, the Ubuntu/Debian updates are live, but (a) they're still not available within the Lightsail blueprints by default, and (b) the Lightsail WordPress stack is custom-installed so updating system PHP may not even do the right thing anyway. So what are people supposed to do?

Aditya Mukerjee 🦦 🏳️‍🌈
@chimeracoder.bsky.social

This is not an obscure use case! Lots of people run WordPress on AWS Lightsail. It's ~90% of the pitch of the entire product! The fact that I'm not seeing more people ask about this makes me concerned that people outside infosec circles are not really grasping the magnitude of this vuln.