People get irrationally angry when PHP has a fault. Must be because we’re too busy holding up 70% of the web to fall for drama.
In all seriousness these exploits are bad. Update right away.
Comment on What's going on with PHP?
ikidd@lemmy.dbzer0.com 3 weeks ago
There’s a bug. Update it.
Pretty simple, but apparently people have decided to lose their minds over this one.
KingThrillgore@lemmy.ml 3 weeks ago
fyzzlefry@retrolemmy.com 2 weeks ago
ikidd@lemmy.dbzer0.com 2 weeks ago
No TV And No Beer Make Homer Go Crazy
NeatNit@discuss.tchncs.de 3 weeks ago
To be fair, it’s quite a biggie.
lime@feddit.nu 3 weeks ago
eh. eliastaylor.com/noexploit/
purplemonkeymad@programming.dev 3 weeks ago
But the outcome of the exploit is bad enough to outweigh the difficulty. Even if it’s hard rce is something you don’t what to leave open.
lime@feddit.nu 3 weeks ago
i mean yeah, patch your stuff. but fact is there are no exploits available, because it only works on modified installs.
corsicanguppy@lemmy.ca 3 weeks ago
I remember a day when we had 4 major ssh Vulnerabilities in the same day. We were on advance notice because #OSVendor so we got them as they came in and went nuts.
And each one that came in spawned another new effort of research, patch, test, roll, systest, releng, ship. It was all day, all-hands, every group, panic.
Wait. Now I can’t decide whether it was 2002 or 2003, because there were 2 days where that fucking happened.
With openssh.
Keep your pants on, right?
ikidd@lemmy.dbzer0.com 3 weeks ago
None of the POCs work and it’s not an issue in a fresh install.