The forum was offline for an hour or so while applying the patches for this significant security weakness.
There is a possibility that some forum functions are broken, as I have not been able to do much testing.
PHP CVE-2026-109618 and CVE-2026-109619
-
xantia_v6
- Forum Admin Team
- Posts: 10980
- Joined: 09 Nov 2005, 22:03
- x 1463
-
mickthemaverick
- Forum Admin Team
- Posts: 21229
- Joined: 11 May 2019, 17:56
- x 8126
Re: PHP CVE-2026-109618 and CVE-2026-109619
All the basics are looking good. 
I used to be indecisive, now I'm not so sure!
I used to ride on two wheels, but now I need all four!
I used to ride on two wheels, but now I need all four!
-
xantia_v6
- Forum Admin Team
- Posts: 10980
- Joined: 09 Nov 2005, 22:03
- x 1463
Re: PHP CVE-2026-109618 and CVE-2026-109619
The official packages have now been installed, so the forum is back to it's normal configuration.
-
Rhothgar
- (Donor 2026)
- Posts: 2433
- Joined: 22 Nov 2004, 00:21
- x 221
Re: PHP CVE-2026-109618 and CVE-2026-109619
It'll be reet!
Thanks for acting so promptly though reading up about this in more detail I think another patch will be due soon because a company called Chainguard broke an embargo with The PHP Foundation and released the patch 6 hours earlier thus giving hackers access to the patch before a dedicated deadline that had been agreed by TPHPF.
Thanks for acting so promptly though reading up about this in more detail I think another patch will be due soon because a company called Chainguard broke an embargo with The PHP Foundation and released the patch 6 hours earlier thus giving hackers access to the patch before a dedicated deadline that had been agreed by TPHPF.