Security - PHP RCEs reported

richardtoohey2 said:
Today's (unrelated) other security news: compromised CA

eMudhra Intermediate CA Compromise

eMudhra Intermediate CA Compromise
emudhra.we-have-a-problem.com
Click to expand...
Thanks! There's commands posted for FreeBSD 14+ at the bottom:
Code: 
cp /etc/ssl/certs/14bc7599.0 /usr/share/certs/untrusted/14bc7599.pem
cp /etc/ssl/certs/ee64a828.0 /usr/share/certs/untrusted/ee64a828.pem
certctl rehash

ee64a828.pem didn't exist for me on 15.1, but the other 2 ran fine
 
janprzy said:
Will the update immediately be available in the pkg repositories or will we have to wait a while?
Click to expand...
No, the packages have to be rebuild first. The fixed version *might* be available in the ports tree though - *IF* the maintainer was included in the coordinated release of the patches and he managed to prepare working patches (i.e. no build errors/problems), and *IF* he could arrange with a committer to get it pushed ASAP the patched versions *could* be available in the ports tree at or closely around the official release date.
Otherwise we have to wait for the patches to be released by the php project, someone updating and test-building the ports, creating a PR and getting the patches committed. (i.e. the standard procedure for patches against a port).
 
You must log in or register to reply here.
Back
Top