News for hackers. Stuff that matters.

A comment on PHP-FPM remote code execution bug exploited in the wild. Parent comment

Re:PHP-FPM remote code execution bug exploited in the wild by kijin on Sunday October 27, 2019 @11:32AM (#21370331)
They will receive a patch if they're using it on a Linux distro that is still supported (e.g. Ubuntu 16.04 LTS). How many people actually bother to run apt-get update && apt-get upgrade on their cloud servers or docker images is a different question, though.
[ Parent | on HN ]
Re:PHP-FPM remote code execution bug exploited in the wild by oefrha on Sunday October 27, 2019 @11:53AM (#21370502)
Probably a good idea to auto install security updates. At least that’s what I do on my servers.
[ Parent | on HN ]
Re:PHP-FPM remote code execution bug exploited in the wild by thinkingemote on Sunday October 27, 2019 @04:50PM (#21372304)
I think it's the default for several years now but I imagine it's not normal for a security update in PHP to restart an nginx process? Maybe it is.
[ Parent | on HN ]