[LUG]Re: PHP Vulnerabilities

To: list@xxxxxxxxxxxxx

Subject: [LUG]Re: PHP Vulnerabilities

From: zleap via list <list@xxxxxxxxxxxxx>

Date: Wed, 21 Oct 2026 08:37:39 +0100

Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx

Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1792141562; h=Content-Type:Cc:From:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Help:List-Id:Subject:Reply-To: Message-ID:References:In-Reply-To:To:Date:MIME-Version:Sender: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Archive; bh=OnKp6mw/4Mjouc3WqA6+oBrnhRUyee20OdhQiL9DtKk=; b=C7Q+NcI+iA0rsX+s9qS77hrAv2 BvemUbe+9ZcZ03RWmh1hsU3m83PO2Del9q/FGrVOoK3X1P6YstvCYKZgl/IOwFwfu4669z/G49aKa CCWDl2V+VBu/7tuBAn9GhejPUDoX6a2lFxMieGb7rU2aVdtWGg5jXrjdEQf59Ma7uE2s=;

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1792568259; bh=73ed2bD9LALFKXrSuD4q2uXFxXnBRR6UruXskej8sXU=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=jkuer2B+10KuT+IHtnPxM8JnAhJdhgi69so2cjwLbvlA7oeGU/voIhCUISKR0pZje Ek7D37qJuWxvkz0E9Aleig7eqyDMqQvZI9v1HBVpoYToeQAhZm4fA2YCs8KC0XT2ve tzAj6hJ0UURudYpAZ+9lJJroyXPJ8Knc5Tu2B9S/OnTSGuTnziN2XDrgeOqSTENSdu VvAx8KdVwgj/le10kCb3QSLVM3Fq3ZDtzrp7sUww/bVBDbKXEpCZ41nHYkLwBT/Gnh vIw/PQvN6dQD8k1f0WwD/Q9rHY1d4lq3D7oLpWQD5AziWAq9l8G8mZgnfPZ9EDOdoL JDUy7Ydl0D3bQ==

Pixelfed have put their sites in to maintenance mode until there is a fix, I have done the same for my site, and the tinkerers and dcglug subdomains

Paul

On 2026-10-21 02:26, Simon Waters wrote:

Not a huge fan of pre-announcing these things as it always makes people
very nervous, only sometimes justifiably. But heads up for announcement
14:)) UTC

https://cert.europa.eu/publications/security-advisories/2026-018/

Paul Sutton
https://zleap.net/

-- The Mailing List for the Devon & Cornwall LUG FAQ: https://www.dcglug.org.uk/faq/

References:

[LUG]PHP Vulnerabilities
- From: Simon Waters