BSI advisory on PHP:
https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2026/2026-297981-1032.html
And yes, I agree with everybody it is best to patch where updates are available.
There *are* mitigations for some of the chain which may be useful as an interim measure - they should be in the PHP advisory I’m guessing, if not I’ll do a blog later. SELinux and AppArmor, configured correctly, work well.
Kevin Beaumont
npub1lc…6lcye
2026-10-21 11:40:55 UTC
in reply to nevent1q…due7
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2026-10-21 11:40:55 UTCEvent JSON
{
"id": "b3ea18843411c9f6032fbec422060201253ba98e6502d62b4ed0300413df5286",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1792582855,
"kind": 1,
"tags": [
[
"proxy",
"https://cyberplace.social/@GossiTheDog/117478710018911684",
"web"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"1bb64b3c2e966ded7754a35f117af3f3a5cb39f8adc8fcd742812aee24607c12",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"d0c6c3f1e8f141a739a32a045fb2ab9e6132f3d8c734a38d13782e5f9bcfe4d7",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/117478710018911684",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/117478710018911684",
"pink.momostr"
],
[
"-"
]
],
"content": "BSI advisory on PHP:\n\nhttps://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2026/2026-297981-1032.html\n\nAnd yes, I agree with everybody it is best to patch where updates are available. \n\nThere *are* mitigations for some of the chain which may be useful as an interim measure - they should be in the PHP advisory I’m guessing, if not I’ll do a blog later. SELinux and AppArmor, configured correctly, work well.",
"sig": "d65b056dbc448d16c83536b304624a4650581857ff1aa60f54b75ad09d3d4d422dae1dad8c4ae8cc0f5457342f9b1d0c0f1d9179b9b07b33c28aaf8338060279"
}