Hello Stuart, [email protected] (Stuart Henderson), 2026.10.21 (Wed) 20:21 (CEST): > On 2026/10/21 19:36, Lars Bonnesen wrote: > > I noticed the recent PHP2Shell security advisories affecting PHP, and I'm > > trying to establish > > the status of the OpenBSD packages. > > As usual for PHP updates, ports are updated, I have pushed through > -stable package builds as well and they were done a few hours ago, > so now it just depends how long it takes to feed out to mirrors. > > Unlike chainguard who had code in advance and released binaries >6h > ahead of the scheduled coordinated release, or various Linux distros > who had code in advance and did stick to things, I couldn't start on > the process until upstream released their files at around 14:36 UT. > (Yes I was watching for them.)
Yet another great job handling it as you did. Yet another huge thank-you by me. (And donations of course.) Marcus
