Out of curiosity, has anyone tried/verified the exploit into an openbsd system?
On Thu, 22 Oct 2026 at 07:46 Marcus MERIGHI <[email protected]> wrote: > Hello Stuart, > > [email protected] (Stuart Henderson), 2026.10.21 (Wed) 20:21 (CEST): > > On 2026/10/21 19:36, Lars Bonnesen wrote: > > > I noticed the recent PHP2Shell security advisories affecting PHP, and > I'm trying to establish > > > the status of the OpenBSD packages. > > > > As usual for PHP updates, ports are updated, I have pushed through > > -stable package builds as well and they were done a few hours ago, > > so now it just depends how long it takes to feed out to mirrors. > > > > Unlike chainguard who had code in advance and released binaries >6h > > ahead of the scheduled coordinated release, or various Linux distros > > who had code in advance and did stick to things, I couldn't start on > > the process until upstream released their files at around 14:36 UT. > > (Yes I was watching for them.) > > Yet another great job handling it as you did. > Yet another huge thank-you by me. > (And donations of course.) > > Marcus > >
