Omega8.cc: The Ninety-Minute Recall

Дата публикации: 21-10-2026 19:04:00

On Tuesday PHP's security team gave notice of two critical bugs, both scored 9.2, with the fixes due on Wednesday at 14:00 UTC. By Wednesday morning every BOA server, PHP 5.6 to 8.6, had switched off one setting which neither Drupal nor Backdrop uses, session upload progress, and a new PHP security floor was waiting, empty. PHP published at 13:34 UTC, and ninety-odd minutes later 8.2.35, 8.3.36, 8.4.27 and 8.5.12 and the floor were on all three BOA trees, so every box below the floor starts its own system pass within half an hour of seeing it, automatic updates switched off or not. By the evening the fixed 8.6 candidate and PHP's own backports for 7.4, 8.0 and 8.1 had gone the same road, leaving 5.6 and 7.0 to 7.3 on BOA's settings, with no patch. BOA's defaults, PHP-FPM alone behind Nginx with no per-request PHP settings, had shut most of the described routes before anyone outside PHP's security team knew of the bugs, though not the out-of-memory bug, which only the fix closes.

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	PreviousNext: How we secured our clients’ Drupal sites with critical PHP security updates	0	13.12	22-10-2026
2	PHP rushed emergency patch after critical RCE flaws leaked online	0	15.26	22-10-2026
3	Drupal Association blog: After the PHP security release: auditing your Drupal sites	0	13.6	22-10-2026
4	PHP has critical vulnerabilities impacting millions of websites, emergency patch out	0	12.15	21-10-2026
5	Dynamosys Insights: PHP2Shell: Updating Drupal Won’t Fix These Critical PHP Flaws	0	7.88	22-10-2026
6	Google Cloud issues urgent PHP patch guidance following critical vulnerabilities	0	11.64	21-10-2026
7	Раскрыты детали уязвимостей в PHP и опубликованы корректирующие обновления	0	20.78	21-10-2026
8	Нарушения эмбарго и затягивание разработки патчей в ходе устранения уязвимостей в PHP	0	8.18	22-10-2026
9	‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire	0	7.35	21-10-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 9. Тональность: 0. Информативность: 16.61. Источник: www.drupal.org.