14:29:29 <br-m> <rucknium> How do I know that I've updated PHP correctly to fix the RCE CVE? I did sudo apt install php on Ubuntu 24. But php -v says "PHP 8.3.6 (cli) (built: Oct 7 2026 18:06:38) (NTS)"
14:29:29 <br-m> <rucknium> Shouldn't the version be 8.3.36?
14:32:05 <br-m> <ofrnxmr:xmr.mx> ubuntu has to reease it
14:43:35 <plowsof> What if it was exploited already and theyre waiting for you to patch php thinking its fixed D: 
14:44:03 <plowsof> Ubuntu doesnt have a fix out yet?
14:49:46 <br-m> <rucknium> I think it's out, but not "out": https://ubuntu.com/security/notices/USN-8948-1
14:54:48 <br-m> <rucknium> I think I got it.
14:55:44 <br-m> <rucknium> moneroresearch.info used to have a "There is no guarantee of the security or stability of this website" notice at the top. Maybe I should put it back up there :D
15:06:08 <br-m> <ofrnxmr> @rucknium: Has to propagate to whatever mirror (or cdn) youre connected to
15:06:48 <br-m> <ofrnxmr> Can check packages.ubuntu
15:09:08 <br-m> <rucknium> I think I have it now. php -v still says 8.3.6, but the package name is 8.3.6-0ubuntu0.24.04.13, which is the updated one according to the security notice. And I restarted nginx. I hope that's everything.
16:47:00 <tevador> Eight CA certificates used secp384r1 private scalars 4, 56, 66, 115, 155, 156, 230 and 237. https://news.ycombinator.com/item?id=50166579
16:48:54 <br-m> <rucknium> Days since low entropy caused key compromise: 0
16:49:24 <br-m> <jpk68:matrix.org> They really pulled an XKCD 221
16:49:39 <br-m> <interestingband:matrix.org> (how is it going ? :D)