From Newsgroup: comp.misc

In case I'm not the last to hear about it:

"Developers of the PHP programming language have identified two
critical vulnerabilities and have been urging website operators to
run an update to fix the issues.

The issue was first discovered using artificial intelligence,
according to a Google-owned cybersecurity agency.

PHP underpins large parts of the internet, raising concerns that a
significant number of websites could be vulnerable to attack.

Among those known to be affected are European government
departments and popular sites like Wikipedia." ...

https://www.abc.net.au/news/2026-10-22/php-vulnerabilities-cyber-asd/107294812

https://www.php.net/archive/2026.php#2026-10-21-5
--
__ __
#_ < |\| |< _#
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

On Thu, 22 Oct 2026 08:41:44 +1000, Computer Nerd Kev wrote:

In case I'm not the last to hear about it:

"Developers of the PHP programming language have identified two
critical vulnerabilities and have been urging website operators to run
an update to fix the issues.

The issue was first discovered using artificial intelligence, according
to a Google-owned cybersecurity agency.

PHP underpins large parts of the internet, raising concerns that a
significant number of websites could be vulnerable to attack.

Among those known to be affected are European government departments
and popular sites like Wikipedia." ...

and Australian Govt depts, including ASD.

https://www.abc.net.au/news/2026-10-22/php-vulnerabilities-cyber-

asd/107294812

https://www.php.net/archive/2026.php#2026-10-21-5

You are it seems :D Patches/updated sources released around midnight Wed local, I finished updates here (cause we use the source, luke) around 6am
Thu local (due the torrential weather alarms, I had been up since 430
anyway)

--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

noel <[email protected]> wrote:

You are it seems :D Patches/updated sources released around midnight Wed local, I finished updates here (cause we use the source, luke) around 6am Thu local (due the torrential weather alarms, I had been up since 430 anyway)

Debian still haven't sorted out how to apply them though. The
updated Debian 12 (Bookworm) and 13 (Trixie) PHP packages broke all
sorts of things because of this bug that stops PHP modules loading
(as I posted about in alt.os.linux.debian), which the maintainers
sure are taking their time looking into:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1151659

Might be time for me to "use the source, Luke" too...
--
__ __
#_ < |\| |< _#
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

On Sun, 25 Oct 2026 11:24:02 +1000, Computer Nerd Kev wrote:

noel <[email protected]> wrote:

You are it seems :D Patches/updated sources released around midnight
Wed local, I finished updates here (cause we use the source, luke)
around 6am Thu local (due the torrential weather alarms, I had been up
since 430 anyway)

Debian still haven't sorted out how to apply them though. The updated
Debian 12 (Bookworm) and 13 (Trixie) PHP packages broke all sorts of
things because of this bug that stops PHP modules loading (as I posted
about in alt.os.linux.debian), which the maintainers sure are taking
their time looking into:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1151659

Might be time for me to "use the source, Luke" too...

on the one debian box i have that stays true to their repo, no sources,
is the freepbx 17 server, debian 12, I did not manualy update it, its
daily apt run did that, much closer to Thur midnight early Friday


if this helps... this is what is installed, sangoma are slack arses and
dont use fast-cgi, just mod_php... but its far more memory efficient
anyway than f/cgi which is I guess why they stuck with it.


libapache2-mod-php8.2/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed,automatic]

php-common/oldstable,oldstable,now 2:93 all [installed,automatic]

php-pear/oldstable,oldstable,now 1:1.10.13+submodules+notgz+2022032202-2
all [installed]

php8.2-bcmath/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-bz2/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-cli/oldstable-security,now 8.2.35-1~deb12u1 amd64
[installed,automatic]

php8.2-common/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed,automatic]

php8.2-curl/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-gd/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-igbinary/oldstable,oldstable,now 3.2.13-1 amd64
[installed,automatic]

php8.2-intl/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-ldap/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-mbstring/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-mysql/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-opcache/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed,automatic]

php8.2-readline/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed,automatic]

php8.2-redis/oldstable,oldstable,now 5.3.7+4.3.0-3 amd64 [installed]

php8.2-soap/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-sqlite3/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-ssh2/oldstable,oldstable,now 1.3.1+0.13-7 amd64 [installed]

php8.2-xml/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2-zip/oldstable-security,now 8.2.35-1~deb12u1 amd64 [installed]

php8.2/oldstable-security,now 8.2.35-1~deb12u1 all [installed]


cheers
--- Synchronet 3.22a-Linux NewsLink 1.2