| ▲ | chasil 2 hours ago | |
Does active SELinux (as used in Red Hat derivatives) limit the damage at all? I built some rhel7 systems that are relaying user-provided LDAP credentials into a domain controller, and these are probably wide open with these flaws. I would hope that SELinux would prevent the launch of a shell, at least. Does PHP built with FORTIFY_SOURCE and other RedHat-recommended compiler flags help? | ||
| ▲ | bananamogul 25 minutes ago | parent [-] | |
Interestingly, PHP lists it as a 9.2 but RHEL lists it as an 8.1. https://access.redhat.com/security/cve/cve-2026-109618 https://access.redhat.com/security/cve/cve-2026-109619 Is this because RedHat's default configuration isn't as vulnerable? I'm ignorant of how these numbers are calculated. Could PHP on Debian, Ubuntu, etc. be a 9.2 but on RedHat it's only an 8.1 because RedHat has various mitigations? | ||