Posted by tuyuri 9 hours ago
Note I want it to work with the backports too, not just the latest version.
It seemed to be helpful for others too so I packaged it up, should work on most Nginx / Certbot servers. hopefully its useful: https://github.com/Indemnity83/popcorn
awake2death or something
They'll of course install a backdoor and patch the exploit so others can't come in. They won't deface the website, so there won't be signs.
> Exploit portability and reliability depend on the PHP build, extensions, frontend behavior and allocator layout.
https://launchpad.net/ubuntu/+source/php8.3/8.3.6-0ubuntu0.2...
https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.2...
but nothing shipped yet by their mirrors, unlike debian.
This adds Ondřej Surý's PPA to your system so you can upgrade the packages.
Most of docker is like this. Images provided by volunteers, and not related to the project. Using docker images you don't maintain yourself, and at least don't upgrade yourself, is not the best recipe for security.
(It's pretty trivial to build your own)
This is false. The Docker Official Images team (i.e. the folks with write access to the docker-library/* organization) are Docker employees.
Honestly I don't even understand why so many docker images prefer to build software from sources, rather than just installing them from debian repositories.
Because Debian uses older relases and a lot of custom patches. One example: Nodejs still doesn't have Typescript support in the Debian packages.
Distribution packages vs. official build from source has both pros and cons.
Unclear why Ubuntu is lagging.
They gave away CDs 20 years ago for free. Cooool.
Fedora is best for desktop.
Debian for servers that never need updates (but I even use Fedora for server now adays)
Debian on the desktop is the best computer decision I ever made
https://www.cisa.gov/news-events/alerts/2026/10/21/critical-...
It feels like many times PRs could just be that.