xeiaso.net · 12d · discuss
In the hours following the release of CVE-2026-109618 for the project PHP, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix multiple memory safety vulnerabilities that allow attackers to execute arbitrary code on your server. This isn't something you can just mitigate and be fine. You MUST patch this. Don't try to bargain here. This is due to the affected components being written in C, the only programming language where these vulnerabilities regularly happen. "This was a terrible tragedy, but sometimes these things just happen and there's nothing anyone can do to...