[LUG]Re: PHP Vulnerabilities

To: list@xxxxxxxxxxxxx

Subject: [LUG]Re: PHP Vulnerabilities

From: Adam Ainsworth <adam.ainsworth@xxxxxxxxx>

Date: Wed, 21 Oct 2026 15:04:29 +0100

Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx

Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1792141562; h=Content-Type:List-Unsubscribe:List-Subscribe :List-Post:List-Owner:List-Help:List-Id:Subject:Reply-To:To:In-Reply-To: References:Message-Id:Date:Mime-Version:From:Sender:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Archive; bh=VtWrybCUgl1uvdgKkoCzD2ufohJrU+2SpdfxHjL6hJY=; b=Ic+50fBZsBcnv6ctKGXcExmq5S 3mOaUT7pKwhLgkUJ3DIenEC/xjZ4r5Wx7Zvb3uFx9giAo9cK1EUxyV5Ya1Lk+HNCMbCaeYGSbvGkN /64ONWWw7dDx2WCTZO0SwxOrY1dpt3IZ7YT35mnS2PV2uTyoTTTlFURfHLN9EdiEHzE4=;

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792591471; x=1793196271; darn=dcglug.org.uk; h=to:in-reply-to:cc:references:message-id:date:subject:mime-version :from:content-transfer-encoding:content-type:from:to:cc:subject:date :message-id:reply-to:content-type; bh=zdizheAS21pF7Dfz9szzN2qw1Rdr24s1mP6duswIwMI=; b=WopfFkwzQamL6CcjpBbghszXXJXjrAaQOk559jyTjVZshav78VEaHg7LT8WeXseBzW SvvXeq4ANHsJtWdA1hncaWgX2qhVlBTEhSrRUbkUGzpzudrXdTVKVRII1F2U5zuvEdDf 3GwGJ55qYK4yRpW+vKwasvNupnxNiJh3LD8m0Hj/kuLq4QACDHsPmjxmnknyod/QrqFC JP0riA5+8Os/+uoxmC74oPfY4TOS/oeZJ7988F/WTNrSy8lpvgDMe6LTHkrNXWw6/2z3 NtL7TIdHJvrVHBghDpLAdsmPBfK29F+gP+Re5cGY89MTsCZot9ThgyVUzGy/OOhJQmD5 mPOQ==

If you are on Ubuntu and using the recommended PHP repo, the updates have been push so I recommend doing an apt update and apt upgrade ASAP.

========

On 21 Oct 2026, at 08:37, zleap via list <list@xxxxxxxxxxxxx> wrote:

Pixelfed have put their sites in to maintenance mode until there is a fix, I have done the same for my site, and the tinkerers and dcglug subdomains

Paul

On 2026-10-21 02:26, Simon Waters wrote:

Not a huge fan of pre-announcing these things as it always makes people
very nervous, only sometimes justifiably. But heads up for announcement
14:)) UTC

https://cert.europa.eu/publications/security-advisories/2026-018/

--

Paul Sutton
https://zleap.net/

--
The Mailing List for the Devon & Cornwall LUG
FAQ: https://www.dcglug.org.uk/faq/

-- The Mailing List for the Devon & Cornwall LUG FAQ: https://www.dcglug.org.uk/faq/

References:

[LUG]Re: PHP Vulnerabilities
- From: zleap via list