alt Hacker NewsEven assuming they didn't have prior knowledge, I don't understand why AWS is going to take 24+ hours to incorporate an upstream fix.
Replies
Elv13 • today at 11:03 PM
[dead]
Even assuming they didn't have prior knowledge, I don't understand why AWS is going to take 24+ hours to incorporate an upstream fix.
[dead]
Probably because it takes time for them to run all the regression tests. They don't want to break something while fixing something else. Damned either way.
In the meantime, you can mitigate the vulnerability significantly by following the instructions here: https://www.abstract.security/blog/php2shell-critical-php-rc...