@GossiTheDog@cyberplace.social
2026-10-20 23:51 UTC
A really good mitigation for this btw - AppArmor or SELinux.
Google something like apparmor restrict php from executing commands. Works against these CVEs.
Sucks for cybersecurity vendors who shipped their appliances using PHP without SELinux or AppArmor, of course.
Replies (1)
-
@GossiTheDog@cyberplace.social 2026-10-21 07:45
Somebody has posted technical details of the PHP vulns. It’s likely LLM generated from GitHub commits (or somewhere!) but it’s in the right ballpark on one of the issues. There’s also another decent mitigation in this but the only real one is to patch. https://jackalsyn.com/posts/php-up-2026.html