@GossiTheDog@cyberplace.social
2026-10-21 08:19 UTC
The screenshot in this tweet is real. https://infosec.exchange/@wdormann/117475540081194496
Replies (1)
-
@GossiTheDog@cyberplace.social 2026-10-21 11:40
BSI advisory on PHP: https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2026/2026-297981-1032.html And yes, I agree with everybody it is best to patch where updates are available. There *are* mitigations for some of the chain which may be useful as an interim measure - they should be in the PHP advisory I’m guessing, if not I’ll do a blog later. SELinux and AppArmor, configured correctly, work well and should be considered regardless.