logoalt Hacker News

Meekroyesterday at 7:16 PM2 repliesview on HN

I've done PHP development for over 20 years, including some pretty large projects. I've never had a situation where a security flaw in PHP itself forced me to scramble to patch something before it got hacked.

On the other hand, for my Linux servers, I had to do that twice in the last month with CopyFail and DirtyFrag.


Replies

diekyesterday at 10:20 PM

CVE-2021-21703 [0] is a similar class of bug in the PHP interpreter itself that was pretty recent

https://www.sentinelone.com/vulnerability-database/cve-2021-...

show 1 reply
ggallasyesterday at 9:12 PM

[dead]