X XFediYour place in the Fediverse
XFEDI

#nixos

ActivityPub

Public posts with this hashtag.

#php2shell was fixed in #NixOS with https://github.com/NixOS/nixpkgs/pull/576853

Until Hydra has caught up with package builds, you can pin to the commit directly (and compile PHP locally, no big deal): nix flake lock --override-input nixpkgs github:NixOS/nixpkgs/8c259fc0dd1f3ccc1aaf4f9156ab16b7328b5a4f

You can verify the PHP version is 8.4.27 afterwards.

GitHubphp: 8.3.35 -> 8.3.36, 8.4.26 -> 8.4.27, 8.5.11 -> 8.5.12 by Ma27 · Pull Request #576853 · NixOS/nixpkgsFixes CVE-2026-109618, CVE-2026-109619 Things done Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs. Follows the automation/AI policy. Built on platform: x86_64-...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

FYI, https://github.com/NixOS/nixpkgs/issues/576485 is the #NixOS tracking issue for the CA issue

(Just updated my machines.)

GitHubCVE-2026-111943 | eMudhra Intermediate CA Compromise tracking issue · Issue #576485 · NixOS/nixpkgsTracking issue for security fixes for eMudhra Intermediate CA Compromise Partial mitigation while channels are getting fixes: security.pki.caCertificateBlacklist = [ # CVE-2026-111943 "Comodo AAA S...
↩ Reply ♡ 0 · ↻ 0 ↗ Original