Post

Btw still no public PoC or any signs that any attack throught those vulns had been successful eliastaylor.com/noexploit/

At least this'll make HackTheBox challenges easier But wow yeah, 9.2 and affects everything since PHP 5 is pretty bad

I had to have someone explain this one to me, lmao

18 servers updated, not including today's winner php4 running in chroot from 2003

Just some further info for y'all, an update has been pushed and these are the approved safe versions that the PHP Foundation has listed.

I'm very sorry that you're in the same hole as I. I really hope it goes smoothly for you.

Thank you for your comment! We're glad you found the CERT-EU advice useful to highlight.

I don't use that sort of verbiage lightly, yeah. I wanted people to understand the severity, cause I don't usually do this kinda thing and folks know I'm at least in the loop with self-hosting stuff, even if I'm not an expert with the tech.

The fact that FA responded immediately should say a lot - both regarding its severity and also the fact that it's in far more competent hands, now.

For your client-server rollout, was checking every PHP worker difficult? I maintain RELIQUA. Interested in a 10-minute isolated comparison after the initial Docker download/build? No client logs needed. github.com/artifexignot...

To be fair this is bigger than just "tech support," with more and more people getting fed up with how corporations have shafted us and stripped our rights to be online. Furries have been trailblazing with self-hosting for a while so this info is essential for us to keep abreast on. 💝

Not everyone can code a site from scratch.

@aevris.bsky.social