<rucknium> How do I know that I've updated PHP correctly to fix the RCE CVE? I did sudo apt install php on Ubuntu 24. But php -v says "PHP 8.3.6 (cli) (built: Oct 7 2026 18:06:38) (NTS)"

<rucknium> Shouldn't the version be 8.3.36?

<ofrnxmr:xmr.mx> ubuntu has to reease it

What if it was exploited already and theyre waiting for you to patch php thinking its fixed D:

Ubuntu doesnt have a fix out yet?

<rucknium> I think it's out, but not "out": ubuntu.com/security/notices/USN-8948-1

<rucknium> I think I got it.

<rucknium> moneroresearch.info used to have a "There is no guarantee of the security or stability of this website" notice at the top. Maybe I should put it back up there :D

<ofrnxmr> @rucknium: Has to propagate to whatever mirror (or cdn) youre connected to

<ofrnxmr> Can check packages.ubuntu

<rucknium> I think I have it now. php -v still says 8.3.6, but the package name is 8.3.6-0ubuntu0.24.04.13, which is the updated one according to the security notice. And I restarted nginx. I hope that's everything.

Eight CA certificates used secp384r1 private scalars 4, 56, 66, 115, 155, 156, 230 and 237. news.ycombinator.com/item?id=50166579

<rucknium> Days since low entropy caused key compromise: 0

<jpk68:matrix.org> They really pulled an XKCD 221

<interestingband:matrix.org> (how is it going ? :D)