Comment on PSA: PHP warns it plans to release 2 emergency patches imminently (today 14:00 UTC)
cmnybo@discuss.tchncs.de 19 hours ago
It’s just one thing after another. I already had to make sure every computer and VPS has the updated CA certificates earlier today. Now I just finished disabling all of my web servers. I hope Debian doesn’t take forever getting the patch out.
They took just a few hours to squeeze out a new ca-certificates. On the other hand the last time there was a huge kernel bug it took well over 24 hours…
slazer2au@lemmy.world 16 hours ago
A bad ca is update a file on every pc and application. A kernal bug is way more involved so it doesn’t make a new problem later.
lemmyvore@feddit.nl 13 hours ago
They took a lot longer than that on some past vulnerabilities, some of them sat unpatched for weeks or months. But it depends on the severity. A remote exploit of severity 9 will probably get expedited.