Re: PHP2Shell 0Day

To: P Gman <patrickgunsolley%gmail.com@localhost>
Subject: Re: PHP2Shell 0Day
From: Greg Troxel <gdt%lexort.com@localhost>
Date: Wed, 21 Oct 2026 19:52:25 -0400

P Gman <patrickgunsolley%gmail.com@localhost> writes:

> Looks like CVE-2026-109618 and CVE-2026-109619 are pretty severe at 9.2.
>
> Is there WIP to ship these to pkgsrc?

The PHP versions released today are already in pkgsrc master and pulled
up to the 2026Q3 branch.  I would imagine that binary packges will
follow pretty soon.

(I've already built my own packages and updated, and did not have any
problems doing so.)

Follow-Ups:
- Re: PHP2Shell 0Day
  - From: P Gman

References:
- PHP2Shell 0Day
  - From: P Gman

Prev by Date: PHP2Shell 0Day
Next by Date: Re: LibreWolf availability
Previous by Thread: PHP2Shell 0Day
Next by Thread: Re: PHP2Shell 0Day
Indexes:

Home | Main Index | Thread Index | Old Index