[LUG]Re: PHP Vulnerabilities

To: list@xxxxxxxxxxxxx

Subject: [LUG]Re: PHP Vulnerabilities

From: Adam Ainsworth <adam.ainsworth@xxxxxxxxx>

Date: Wed, 21 Oct 2026 07:38:55 +0100

Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx

Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1792141562; h=Content-Type:List-Unsubscribe:List-Subscribe :List-Post:List-Owner:List-Help:List-Id:Subject:Reply-To:To:In-Reply-To: References:Message-Id:Date:Mime-Version:From:Sender:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Archive; bh=Vw4UxD2mHu9W77yse/ekAOPK4eq8QkIj4XxEQEBVlL8=; b=qP9T+dF/h+FMJxjcCkkSlbi1kB FQlMW2XMD1MurQ+cNHRolMlEBjzPZ1ZQfWqWE+Bffs6aCeQmuK1IGo0GZ39MOR27cUlopA11mTeAp 7EZLmf1VcO08K9sD/jBPYLKjPkPgQpQvMZMcBIo3z2PViZ6c5xZFDQOTqisjl4Tunm0c=;

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792564749; x=1793169549; darn=dcglug.org.uk; h=to:in-reply-to:cc:references:message-id:date:subject:mime-version :from:content-transfer-encoding:content-type:from:to:cc:subject:date :message-id:reply-to:content-type; bh=bCcmoC3L4vfmoF5R3YbimjvjC9qCOlDDDxA2Pvu2dT4=; b=IWjqPDZkVwVtChRAiSqQZXT9vzxlh8EqSAoZ+HmFwoaYzh86xnBq4SBkWptxrJVhQL B5FtR3ql3GWvsVJqYRXNnZwDNHxf2fKq6W1LXkuvLtvDT7ndZd/B5aETGoC/Ej3P6Bvf WBGfdTRifcl9Fgs7SS3zYwsZKYwsftCUfqlAwb5dy822QuR0pEajieeHpyItGyFVDDGw JhDGz5uhyD1pKoSEccL3HxMyFxA7vK9827cNdmfVXbvuS9x5IBB6OPlrNxJKigwFdDQj vlJxvzgZQmaHp+cHaf6KxqE33WJv947i9LXZHVOTGPvG8oNAl7RCnYcwTPH7tc04GeYS reNg==

I’m glad for it as I only tend to do updates once a week but now I know to do it this afternoon on the web server I run PHP directly on. I have a few others where PHP is run inside Docker, so will need to wait for those images to become available.

Adam

========

On 21 Oct 2026, at 07:35, zleap via list <list@xxxxxxxxxxxxx> wrote:

Thanks for this, my site runs on php, but I struggle enough with all this as it is, from what I am reading on Mastodon, I should turn off php apps, I don't even know how to do that.

I just go to the hosting control panel thing and I can update php from there.

can we be kept updated on this so I can update to the newer version when available please. In the mean time I will make sure i have back ups.

thanks

Paul

On 2026-10-21 02:26, Simon Waters wrote:

Not a huge fan of pre-announcing these things as it always makes people
very nervous, only sometimes justifiably. But heads up for announcement
14:)) UTC

https://cert.europa.eu/publications/security-advisories/2026-018/

--

Paul Sutton
https://zleap.net/

--
The Mailing List for the Devon & Cornwall LUG
FAQ: https://www.dcglug.org.uk/faq/

-- The Mailing List for the Devon & Cornwall LUG FAQ: https://www.dcglug.org.uk/faq/

References:

[LUG]Re: PHP Vulnerabilities
- From: zleap via list