#1 Today 04:21:09

johnraff

nullglob

From: Nagoya, Japan

Registered: 2015-09-09

Posts: 13,594

Website

PHP vulnerabilities

Most members will already know that critical vulnerabilities have been found in php, the scripting language used in many websites. It's been top news everywhere. Vulnerabilities: CVE-2026-109618 and CVE-2026-109619

Debian patches have already been applied in Trixie and Bookworm Security:
https://security-tracker.debian.org/tra … age/php8.4

Many older versions of php have also had fixes backported.

Regular BunsenLabs Carbon and Boron users should run the usual apt update and upgrade commands to make sure that their packages are up to date.

People running their own web servers should take care that the php libraries they are using have been patched for these vulnerabilities.

The BunsenLabs forum server has also been upgraded.

---

...elevator in the Brain Hotel, broken down but just as well...
( a boring Japan blog (currently paused), now on Bluesky and Mastodon, there's also some GitStuff )

Introduction to the Bunsenlabs Boron Desktop