| ▲ | anthonyeden 4 hours ago | ||||||||||||||||||||||
From what I can tell, Cloudflare has mitigated this via their WAF [0] (free and paid). The Alpine GitLab[1] indicates the PHP versions to be released 21-10-2026 14:00:00 UTC are: 8.5.12 8.4.27 8.3.36 8.2.35 [0] https://developers.cloudflare.com/waf/change-log/changelog/ [1] https://gitlab.alpinelinux.org/groups/alpine/-/work_items?sh... | |||||||||||||||||||||||
| ▲ | edelbitter 3 hours ago | parent | next [-] | ||||||||||||||||||||||
Release notes draft filenames (but not contents) are published to the mailing list: https://news-web.php.net/php.webmaster/34116 | |||||||||||||||||||||||
| |||||||||||||||||||||||
| ▲ | tro2102 3 hours ago | parent | prev | next [-] | ||||||||||||||||||||||
We observed this update ourselves and suspected it to be a mitigation when it was rolled, but I can't find any definitive record that these rules are about the PHP vulnerability. Do you have more info? | |||||||||||||||||||||||
| |||||||||||||||||||||||
| ▲ | ksenzee 4 hours ago | parent | prev [-] | ||||||||||||||||||||||
I have sites behind Fastly and Akamai, and I would dearly love to hear from either of them. | |||||||||||||||||||||||
| |||||||||||||||||||||||