關於這一集
PHP2Shell: patch the runtime, close the package gap
A dedicated GetPageSpeed special on PHP2Shell and closing the gap between a security fix and an installable package.
Check your packages and find the current fix: [GetPageSpeed PHP2Shell hub](https://www.getpagespeed.com/php2shell).
GetPageSpeed CentOS 7 packages are available now. GetPageSpeed packages for Ubuntu and Debian are on the way; availability varies by platform and PHP branch. Supported vendor security updates should be used where applicable.
Sources checked on 2026-10-24:
- [GetPageSpeed checker, packages and mitigation guide](https://www.getpagespeed.com/php2shell)
- [PHP advisory: out-of-memory corruption](https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w)
- [PHP advisory: stale global state](https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp)
英語
美國
逐字稿 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
本 Podcast 中的其他單集
Daily IT Briefing: October 19, 2026
AI Policy
Anthropic is promoting a federal AI safety bill with high intervention thresholds. The draft builds on the "Advanced AI Framework" Anthropic says it has advocated since June. It would create a narrow, court-gated way to stop a frontier model release.
W…
Daily IT Briefing
AI & Security
A Claude research model explains where the NIST elliptic curve seeds came from. Anthropic researchers report that an internal Claude research model solved a 25-year-old cryptographic mystery in under 30 minutes. The NSA supplied seeds for the NIST P-192, P-224, P…
Daily IT Briefing
Cybersecurity
Security dominates again today. A China-attributed MSP supply-chain breach, a platform-wide secrets exposure, and the PHP2Shell fallout all point to the same theme: attackers are using automation and AI to move faster than defenders' timelines assume.
ConnectWise clo…
Daily IT Briefing
AI Policy
DHS orders federal civilian agencies to remove DeepSeek. Agencies must stop buying DeepSeek products and services and strip existing deployments from government IT systems.
Scope: The order covers third-party products built on DeepSeek technology, not just DeepSeek's ow…
Daily IT Briefing
Cybersecurity
Today is a heavy security day. Three critical incidents hit core web and developer infrastructure: the PHP runtime, the TLS trust chain, and a widely used AI gateway library.
"PHP2Shell": critical RCE in the PHP engine, patches out now
Early reports described two eme…
免責聲明: 本頁面嵌入的 Podcast 和封面圖片來自 Lex，歸其所有者所有，與 Listen Notes, Inc. 無關聯，也未獲得 Listen Notes, Inc. 背書。
