2026-10-22 12:09 UTC
For some reason, a few of my clients’ e-commerce sites break after updating PHP. I can’t share any more details at the moment, as they’re still working on it.
On a completely unrelated note, two customers of my clients insisted on having a call, both involving the cybersecurity department of the massive corporate group they belong to. Wasted time… but ok.
One thanked us for responding so quickly. The other asked why their server hadn’t already been secured.
I explained that I had already applied the mitigations and installed the patch just ten minutes after it became available.
Their response: “You need to review your processes, because servers must be patched before the vulnerability is publicly disclosed.”
I ended the call laughing while eating a plate of tortellini.
#php #IT
Replies (4)
-
@Eggfreckles@mastodon.mit.edu 2026-10-22 12:15
@stefano@mastodon.bsd.cafe AWS didn't patch PHP in Amazon Linux 2033 for several hours after the vulnerability was disclosed. https://docs.aws.amazon.com/linux/al2023/release-notes/relnotes-2023.12.20261021.html
-
@andyc@yakshaving.social 2026-10-22 12:18
@stefano@mastodon.bsd.cafe 100% agreed. Also, please could you could kindly send me the winning numbers for the EuroMillions lottery on Saturday :-)
-
@skyglobe@hostux.social 2026-10-22 12:20
@stefano@mastodon.bsd.cafe next time tell them that they're right and that they absolutely should've budgeted 500 billion Euro in Claude tokens to pre-emptively find and fix/mitigate all the exploits in all the software they use. /s
-
@jac@404brain.boo 2026-10-22 12:20
@stefano@mastodon.bsd.cafe Oh, they think you're psychic. Fantastic. 😄