关于这一集
PHP2Shell: patch the runtime, close the package gap
A dedicated GetPageSpeed special on PHP2Shell and closing the gap between a security fix and an installable package.
Check your packages and find the current fix: [GetPageSpeed PHP2Shell hub](https://www.getpagespeed.com/php2shell).
GetPageSpeed CentOS 7 packages are available now. GetPageSpeed packages for Ubuntu and Debian are on the way; availability varies by platform and PHP branch. Supported vendor security updates should be used where applicable.
Sources checked on 2026-10-24:
- [GetPageSpeed checker, packages and mitigation guide](https://www.getpagespeed.com/php2shell)
- [PHP advisory: out-of-memory corruption](https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w)
- [PHP advisory: stale global state](https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp)
英语
美国
文字稿 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
本播客中的其他单集
Daily IT Briefing
AI & Security
A Claude research model explains where the NIST elliptic curve seeds came from. Anthropic researchers report that an internal Claude research model solved a 25-year-old cryptographic mystery in under 30 minutes. The NSA supplied seeds for the NIST P-192, P-224,...
Daily IT Briefing: October 14, 2026
AI & Machine Learning
SpaceX's AI unit merges Grok, Cursor and X Premium into one "X Subscription." Reports don't agree on the entity's name. It appears as both "SpaceX Super Intelligence (SpaceXSI)" and "SpaceXAI," but the product details match.
| Tier | P...
Daily IT Briefing: October 19, 2026
AI Policy
Anthropic is promoting a federal AI safety bill with high intervention thresholds. The draft builds on the "Advanced AI Framework" Anthropic says it has advocated since June. It would create a narrow, court-gated way to stop a frontier model release.
...
Daily IT Briefing
Cybersecurity
Today is a heavy security day. Three critical incidents hit core web and developer infrastructure: the PHP runtime, the TLS trust chain, and a widely used AI gateway library.
"PHP2Shell": critical RCE in the PHP engine, patches out now
Early reports described two e...
Daily IT Briefing
AI Policy
DHS orders federal civilian agencies to remove DeepSeek. Agencies must stop buying DeepSeek products and services and strip existing deployments from government IT systems.
Scope: The order covers third-party products built on DeepSeek technology, not just DeepSeek's ...
免责声明: 本页面嵌入的播客和封面图片来自 Lex，归其所有者所有，与 Listen Notes, Inc. 无关联，也未获得 Listen Notes, Inc. 背书。
