On 22/10/2026 09:13, Marius Schwarz wrote:
My points:
a) it should not need karma, as it's an emergency patch for a critical
vulnerablility. so critical that security firms reaserching it shut down
their websites!!! (i.e. wordfence did)
I also had the opportunity to see the exploit at work. It's really
trivial and a wonder that it was under the hood for 22 years.
b) it does not matter at all, if one component i.e. php-fpm out of 4
use-cases -> "cgi,cli,fpm,mod_php" is safe, the rest is not.
Can now one pls push this to stable?
It is already queued for stable so will be included in the next push
but IIRC those only happen once a day and there's no such thing as an
emergency push.
It will then take another day or two to reach all the mirrors so if
you need it before then you will need to download it directly.
Tom
--
Tom Hughes ([email protected])
http://compton.nu/
--
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
