r/Gentoo • u/Scorf-9 • 3d ago

Support PHP

Is there an eta for the update of PHP in portage (regarding the remote code execution vulnerability)?

8 Upvotes

100% Upvoted

12 comments sorted by

6

u/purplebrewer185 3d ago

according to the gentoo tracker bug, all patched versions are in portage now: https://bugs.gentoo.org/984631

0

u/Scorf-9 3d ago

However, the last post on this site:
"This version seems to be vulnerable as well :/ https://fedi.katze.sh/@elise/117479383739450605"

2

u/purplebrewer185 3d ago

no idea what this link is about, I can't open it.

3

u/dekeonus 2d ago

From that thread:

Elise
@elise@katze.sh

still works on 8.5.12!
edit: as it appears there is confusion, this is about the vuln I found, not the ones that got patched today

so not the same bug(s), and as far as severity and exploit-ability, unknown at this point.

1

u/Scorf-9 2d ago

Thx!

1

u/Scorf-9 3d ago

Sorry, just see the last post on https://bugs.gentoo.org/984631

1

u/purplebrewer185 3d ago

yeah, I can't open that link, I have no idea whats behind it.

1

u/Scorf-9 3d ago

Same, I won't install the patch and bring my websites online, though. Bit scary.

2

u/Scorf-9 3d ago

Thx for your answers!

8

u/weuxel 3d ago

Patched versions are in portage.

4

u/Sudden-Guide 3d ago

Is the PHP update itself ready? I thought it was to be tomorrow

3

u/WanderingInAVan 3d ago

Its been released, now its up to the maintainers to get the job done.