[<prev] [next>] [day] [month] [year] [list]
Message-Id: <0EE87AE6-D96F-44A7-BB0E-B66934AADCE8@edvina.net>
Date: Tue, 10 Nov 2026 11:26:41 +0100
From: "Olle E. Johansson" <oej@...ina.net>
To: oss-security@...ts.openwall.com
Subject: OT - PHP2shell - how did we do five years after Log2j?
The GVIP project just published a blog post about the PHP2shell incident.
https://www.gvip-project.org/blog/2026/php2shell/
In short:
a vulnerability record is only as useful as its ability to match the software you run, and today our databases cannot match runtimes.
On Friday the 13th at 16:00 CET we’re hosting a webinar to discuss how the vulnerability systems handled this issue.
Registration is free at https://gvip-project.org/community/
Looking forward to seeing you then!
/Olle
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
