外部精选
后端
#Linux#内核Critical PHP security update coming
The PHP security team has let it be known that there is a high-stakes security update coming at 14:00 UTC on October 21. "All PHP users are encouraged to prepare now so they can upgrade as soon as the release is availab…
LWN.netcorbet2026/10/20 · 5 天前1 分钟阅读
这个来源的 RSS 只提供摘要，下面是原文导语；完整论述请点「打开原文」。
From what I've read: config settings for PHP alone won't help you; you have to block multi-part uploads at the layer before input is handed over to PHP, too. And it's unknown if that suffices.
See e.g. https://www.vincentschmalbach.com/cve-2026-109618-and-cve-2026-109619-what-you-should-do-now/ which is updated often with additions & corrections.
本条为导读摘要，完整论述请以原文为准。