Posted over at atari-forum. Affect php version should be patched as soon as possible.
https://www.atari-forum.com/viewtopic.php?t=46555
Can all registered uses please login, even just for a few minutes..
It helps build a picture where our "good traffic" is coming from..
Thanks :)
It helps build a picture where our "good traffic" is coming from..
Thanks :)
Heads up for serious PHP security vulnerability
-
TheNameOfTheGame
- Posts: 189
- Joined: Tue Dec 05, 2017 5:49 pm
- Location: Almost Heaven, West Virginia
Re: Heads up for serious PHP security vulnerability
Thanks for the heads up, I will take a look. The server auto installs updates pretty-much as soon as they are released as standard anyway.
-
stephen_usher
- Site sponsor
- Posts: 7653
- Joined: Mon Nov 13, 2017 7:19 pm
- Location: Oxford, UK.
- Contact:
Re: Heads up for serious PHP security vulnerability
Unfortunately the distro I've been using hasn't posted a new version yet, so I've turned my web server off for the time being.
In fact that's what their own website has done, gone to a static page.
In fact that's what their own website has done, gone to a static page.
Intro retro computers since before they were retro...
ZX81->Spectrum->Memotech MTX->Sinclair QL->520STM->BBC Micro->TT030->PCs & Sun Workstations.
Added code to the MiNT kernel (still there the last time I checked) + put together MiNTOS.
Collection now with added Macs, Amigas, Suns and Acorns.
ZX81->Spectrum->Memotech MTX->Sinclair QL->520STM->BBC Micro->TT030->PCs & Sun Workstations.
Added code to the MiNT kernel (still there the last time I checked) + put together MiNTOS.
Collection now with added Macs, Amigas, Suns and Acorns.
Re: Heads up for serious PHP security vulnerability
The repos are not loading properly, looks like they timing out 
Short of taking the server offline theres not much else I can do. Will keep trying..
Short of taking the server offline theres not much else I can do. Will keep trying..
Re: Heads up for serious PHP security vulnerability
I've done some patches to help prevent the issues.. Probably not 100% safe, but better than nothing.
Re: Heads up for serious PHP security vulnerability
Now updating to the new version..
Re: Heads up for serious PHP security vulnerability
Server is now patched and everything has checked out fine afterwards.
The Ubuntu PPA was getting hammered all evening with everyone trying to update at once, so it took a fair few attempts to get all the packages down. It felt a lot like loading a game off cassette, with the odd “R Tape loading error” thrown in for good measure. It got there in the end though.
For anyone else running their own server, once the update is installed don’t forget to restart PHP-FPM (or Apache if you’re using mod_php), otherwise the old version just carries on running in the background. “php -v” will show what’s installed, but it’s the restart that actually puts it into use.
The Ubuntu PPA was getting hammered all evening with everyone trying to update at once, so it took a fair few attempts to get all the packages down. It felt a lot like loading a game off cassette, with the odd “R Tape loading error” thrown in for good measure. It got there in the end though.
For anyone else running their own server, once the update is installed don’t forget to restart PHP-FPM (or Apache if you’re using mod_php), otherwise the old version just carries on running in the background. “php -v” will show what’s installed, but it’s the restart that actually puts it into use.