The media in this post is not displayed to visitors. To view it, please go to the original post.
If you run #Friendica or maintain a #Linux web #server running #PHP, whether bare metal, #Docker, or anything in between: **update PHP immediately.**
Two critical #RCE (Remote Code Execution) vulnerabilities affect PHP:
• CVE-2026-109618
• CVE-2026-109619
Currently fixed versions:
• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35
This affects PHP servers, PHP-FPM, Docker images and containers containing PHP, and applications such as Friendica.
Update your PHP packages. If you're using containers, pull/rebuild your images and recreate the containers.
Don't just update the application. Make sure the underlying PHP runtime is patched too.
