Major PHP security alert

[Matterwave]

https://patchstack.com/articles/php-major-vulnerability-alert-10-2026/

There was a major detected security vulnerability in PHP today. Might be worth looking into and patching. I assume PF is running PHP?

 

[Borek]

More precisely: it wasn't detected today but earlier and yesterday there were two patches published. I assume @Greg Bernhardt is aware and applying patches is rather straightforward (there were some initial hiccups, after the info was made official I had to wait two hours before patches became available for my oldstable bookworm).

 

[Greg Bernhardt]

All good, we got patched yesterday. Thanks!

 

[noahthompson]

Glad to hear it was handled quickly. The detail about the two-hour gap before patched packages hit oldstable bookworm is a useful reminder that "patched upstream" and "patched on your box" aren't the same thing. That waiting window is exactly when a lot of systems sit exposed, so keeping an eye on the distro's security tracker matters as much as the initial alert. Out of curiosity, did the patch go smoothly once it landed, or were there any dependency snags to work through?

 

[Greg Bernhardt]

Glad to hear it was handled quickly. The detail about the two-hour gap before patched packages hit oldstable bookworm is a useful reminder that "patched upstream" and "patched on your box" aren't the same thing. That waiting window is exactly when a lot of systems sit exposed, so keeping an eye on the distro's security tracker matters as much as the initial alert. Out of curiosity, did the patch go smoothly once it landed, or were there any dependency snags to work through?

The PHP update was small, no blast radius. Your response reads like AI.

 

[renormalize]

Your response reads like AI.

Indeed, GPTZero agrees:

I've also recently flagged 3 posts for including AI nature photos without labeling them as such. Which leads me to this question:
Might it be possible to auto-scan newly submitted posts on PF using an AI detector and then flag AI posts for moderator review before they are allowed to appear on here?