<![CDATA[If you run #Friendica or maintain a #Linux web #server running #PHP, whether bare metal, #Docker, or anything in between: **update PHP immediately.**]]>If you run or maintain a web running , whether bare metal, , or anything in between: **update PHP immediately.**

Two critical (Remote Code Execution) vulnerabilities affect PHP:
• CVE-2026-109618
• CVE-2026-109619

Currently fixed versions:
• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35

This affects PHP servers, PHP-FPM, Docker images and containers containing PHP, and applications such as Friendica.

Update your PHP packages. If you're using containers, pull/rebuild your images and recreate the containers.

Don't just update the application. Make sure the underlying PHP runtime is patched too.

Link Preview Image
]]>https://citiverse.it/topic/0bd85179-bb97-48c4-a07f-db8753c40ee4/if-you-run-friendica-or-maintain-a-linux-web-server-running-php-whether-bare-metal-docker-or-anything-in-between-update-php-immediately.RSS for NodeFri, 23 Oct 2026 10:59:10 GMTWed, 21 Oct 2026 19:41:39 GMT60