I'd like to take this opportunity to say a big thank you—especially to the AIO team—for patching the software so quickly 👍
Search
Items tagged with: PHP
The media in this post is not displayed to visitors. To view it, please go to the original post.
If you run #Friendica or maintain a #Linux web #server running #PHP, whether bare metal, #Docker, or anything in between: **update PHP immediately.**
Two critical #RCE (Remote Code Execution) vulnerabilities affect PHP:
• CVE-2026-109618
• CVE-2026-109619
Currently fixed versions:
• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35
This affects PHP servers, PHP-FPM, Docker images and containers containing PHP, and applications such as Friendica.
Update your PHP packages. If you're using containers, pull/rebuild your images and recreate the containers.
Don't just update the application. Make sure the underlying PHP runtime is patched too.
I made the decision to take down my nextcloud server due to the current PHP vulnerability. I hope we have a fix very soon.
das scheint wohl ein wirklich kritischer PHP Fehler zu sein!
#php #Sicherheit #Security #Admin
php2shell: Kritische Sicherheitslücken erlauben Codeeinschleusung in PHP
Zwei Fehler machen Webserver mit PHP aus dem Netz angreifbar. Betroffen: Versionen der letzten 20 Jahre, Admins sollten patchen.Dr. Christopher Kunz (Security)
The PHP security team is giving advance notice of an upcoming security release scheduled for Wed, 21 October 2026 at 14:00 UTC, addresses two critical vulnerabilities, both rated CVSSv4 9.2.
All PHP users are encouraged to prepare so they can upgrade immediately tomorrow. Should details of the vulnerabilities become public, or should evidence of active exploitation appear we will release sooner.
Full details, affected versions, and the fixed versions will be published with the release.
#php