302
submitted 3 days ago* (last edited 2 days ago) by BlackEco@lemmy.blackeco.com to c/selfhosted@lemmy.world

The set of vulnerabilities is dubbed PHP2Shell and disclosure is scheduled for 14:00 UTC with attacks expected to follow soon after.

It is adviced to take offline every non-vital services until the patch has been installed (or the Docker image has been updated with a patched version of PHP)

Update: fix is out https://www.php.net/archive/2026.php#2026-10-21-5

you are viewing a single comment's thread
view the rest of the comments
[-] illusionist@lemmy.zip 39 points 3 days ago

Shouldn't especially vital services be taken down to secure them?

[-] cybervseas@lemmy.world 37 points 3 days ago

Yep. Except if taking them down will kill people.

[-] Natanox@discuss.tchncs.de 15 points 2 days ago

takes down 112 / 911 services

Don't worry guys, we're safe now! ꒰ঌ(˶ˆᗜˆ˵)໒꒱

[-] HerbGrower@slrpnk.net 11 points 2 days ago
[-] Cheebus@lemmy.world 22 points 2 days ago

round these parts we use 0118 999 881 999 119 725 3

[-] FauxLiving@lemmy.world 13 points 2 days ago

0118 999 881 999 119 725 3

We're YOUR emergency services

[-] snoons@lemmy.ca 2 points 2 days ago

I'll never remember that. I'll just send an email...

[-] slazer2au@lemmy.world 9 points 2 days ago

As if those are running anything as recent as php.

[-] Natanox@discuss.tchncs.de 4 points 2 days ago

For their interactive mapview in the control room they probably do.

[-] NateNate60@lemmy.world 4 points 2 days ago

Me when I take down only one hundred twelve out of nine hundred eleven services, leaving seven hundred ninety-nine services still running

this post was submitted on 21 Oct 2026
302 points (99.3% liked)

Selfhosted

63158 readers
555 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS