[LUG]Re: PHP Vulnerabilities

To: list@xxxxxxxxxxxxx

Subject: [LUG]Re: PHP Vulnerabilities

From: zleap via list <list@xxxxxxxxxxxxx>

Date: Wed, 21 Oct 2026 07:34:53 +0100

Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx

Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1792141562; h=Content-Type:Cc:From:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Help:List-Id:Subject:Reply-To: Message-ID:References:In-Reply-To:To:Date:MIME-Version:Sender: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Archive; bh=CPpiKTGNbAjXrMhL7dhFn7h7V5OKORJoU4acPxE4Lew=; b=UNYHw9lBO/4sgEB3uX6hO/hA60 xmg+K34sEeb4t+wnrSj9QIXcVUBVNTFu5lny5+juLZp9E1IG5fahrVwAf4QzFr3tOkmA3GDAuo5Li DBInY/IVXtnAbkWVhaYxgnVMDQdJH43IQP3qiAsCUEPYnIeKH2qbiIV5AmJfijnMFkjA=;

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1792564493; bh=67iM+0HN6oArBVFmqP9zuLphgfc+NNbq4wMXLm3wmVs=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=gqo2+wVU70f3gITTtu/lA8gTb6S55Txc0nkHdjX0ygKV7UbZ5TKEsvgJkhYN3RiYp htPeLJlwDQ72VFlJDDHMHZiodMGDt2MxXEpH3ZKOS+QcXJTD4/SuGC3YACmnVRqfws 68M5EaOF2DjreNNQwJjtz9TXowouxvu1DUH0XIFGOHz/w0uTgVUgDdgCYMPNl7mXmM wBWTCNeuw3QIO4C1AeWS73MJDdaLC0PTWWKEQQnAPu5i3TndpFgeVIST30FG2gXleV cF563hkS0ESAhYlH943ASwv6ju6m3HCVoVGfN+AhpV1Y7lnL0EcUg4cWDGHiu/YPjG OvNi6bXinrAKg==

Thanks for this, my site runs on php, but I struggle enough with all this as it is, from what I am reading on Mastodon, I should turn off php apps, I don't even know how to do that.

I just go to the hosting control panel thing and I can update php from there.

can we be kept updated on this so I can update to the newer version when available please. In the mean time I will make sure i have back ups.

thanks

Paul

On 2026-10-21 02:26, Simon Waters wrote:

Not a huge fan of pre-announcing these things as it always makes people
very nervous, only sometimes justifiably. But heads up for announcement
14:)) UTC

https://cert.europa.eu/publications/security-advisories/2026-018/

Paul Sutton
https://zleap.net/

-- The Mailing List for the Devon & Cornwall LUG FAQ: https://www.dcglug.org.uk/faq/

References:

[LUG]PHP Vulnerabilities
- From: Simon Waters