[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <b350751a7a4a0d8faa100060a0b7c5c3e1ff5ff9.camel@debian.org>
Date: Wed, 21 Oct 2026 17:41:56 +0200
From: Yves-Alexis Perez <corsac@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2026-109619: PHP
8.2–8.5 RCE via stale global state
On Wed, 2026-10-21 at 10:24 -0500, Aaron Rainbolt wrote:
> While not yet fully confirmed, the Fediverse is reporting that the fix
> to at least PHP 8.5.12 may be incomplete:
> https://fedi.katze.sh/@elise/117479383739450605
@elise also sayd it seems like a *different* vulnerability:
https://fedi.katze.sh/@elise/117478655339557825
> ok thinking more about this, there's no way this is the same vuln, this is
> another one.
>
> today is really a day for php.
--
Yves-Alexis
Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
