I just checked all my servers and the installed containers and the minimal setup I use has paid of once again. No PHP anywhere. So I can relax and stick to my weekly update schedule. Sending sysadmin hugs to all folks out there dealing with getting the PHP updates installed and working :(
0 Boosts
0 Likes
@jwildeboer Running a PHP hosting business. Interesting day for me.
@jorijn If you can and are allowed to — would be interesting to get a post-mortem on how this affected you and and your business. My guess is that the impact will be limited. But some forgotten/hidden PHP in 3rd party stacks or containers at places with less prepared admins will get hit :(
I will not link to sources and you don't have to trust me, but there are already exploits out there, one of them will get you a shell on servers running WordPress. So this is a critical update. CVE-2026-109618 and CVE-2026-109619 seem to affect all PHP versions going back to 5 and could result in RCE (Remote Code Execution).
#SysAdminLife @homelab