Page 1 of 1

Heads up for serious PHP security vulnerability

Posted: 21 Oct 2026 18:44
by TheNameOfTheGame
Posted over at atari-forum. Affect php version should be patched as soon as possible.

https://www.atari-forum.com/viewtopic.php?t=46555

Re: Heads up for serious PHP security vulnerability

Posted: 21 Oct 2026 18:48
by exxos
Thanks for the heads up, I will take a look. The server auto installs updates pretty-much as soon as they are released as standard anyway.

Re: Heads up for serious PHP security vulnerability

Posted: 21 Oct 2026 18:51
by stephen_usher
Unfortunately the distro I've been using hasn't posted a new version yet, so I've turned my web server off for the time being.

In fact that's what their own website has done, gone to a static page.

Re: Heads up for serious PHP security vulnerability

Posted: 21 Oct 2026 18:55
by exxos
The repos are not loading properly, looks like they timing out :roll:

Short of taking the server offline theres not much else I can do. Will keep trying..

Re: Heads up for serious PHP security vulnerability

Posted: 21 Oct 2026 19:05
by exxos
I've done some patches to help prevent the issues.. Probably not 100% safe, but better than nothing.

Re: Heads up for serious PHP security vulnerability

Posted: 21 Oct 2026 19:33
by exxos
Now updating to the new version..

Re: Heads up for serious PHP security vulnerability

Posted: 21 Oct 2026 20:04
by exxos
Server is now patched and everything has checked out fine afterwards.

The Ubuntu PPA was getting hammered all evening with everyone trying to update at once, so it took a fair few attempts to get all the packages down. It felt a lot like loading a game off cassette, with the odd “R Tape loading error” thrown in for good measure. It got there in the end though.

For anyone else running their own server, once the update is installed don’t forget to restart PHP-FPM (or Apache if you’re using mod_php), otherwise the old version just carries on running in the background. “php -v” will show what’s installed, but it’s the restart that actually puts it into use.