> 2026-10-22 @ 09:12 CDT - CI has to be down until we patch that PHP exploit that is making global news.

GED in sysadmin

shlomo wrote:

Collaborate this! sudo apt-get upgrade php

Done

you should know better.

shlomo wrote:

Perfect is the enemy of good.

8.5.11 to 8.5.12? easy. a simple apt upgrade will do the trick.
8.1.34 to 8.5.12? absolutely not easy. decent chance you're breaking code at that point.

I'm not Spanky, so I don't know what versions were involved, but upgrading from one version to another is not usually apt upgrade and done, unless you write PHP like you write BASIC.

shlomo wrote:

why do you say there was a big jump in versions? weren't there a lot of versions that were patched? It could have been a small jump.

that's true, but if i were doing it, I'd just jump to 8.5.12 and get it over with.

shlomo wrote:

the version change was, from: 7.4.33, to: 7.4.3-4ubuntu2.29+esm5

The package version 7.4.3-4ubuntu2.29+esm5 is the exact security release provided by Canonical to fix the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
Because PHP 7.4 is officially end-of-life upstream, this backported fix is delivered via Ubuntu Pro Extended Security Maintenance (ESM) for systems running Ubuntu 20.04 LTS (Focal Fossa).

ES!

Yeah, that works. You can use ESM on 20.04 until 5/2032.

wrote:

Surely you see the advantages of NGINX now.

Fuqing NGINX!!!!!   NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX
                           \
fatrage.gif

Spanky wrote:

Even though ChatGPT did all the work, I learned quite a bit.

The package management in Ubuntu (apt) is amazingly powerful.

But I wanna get the credit

wrote:

we were not compromosed
\

exactly, the old site could have been left running indefinitely with no adverse outcome even if every hacker in the world targeted CI at the same timbe. Just moar Spanky

8.5.12?

I’m waiting for 9.0.01

wrote:

Fuqing NGINX!!!!!   NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX NGINX
                           \
fatrage.gif

I wrote that just for you.

Look what my AI said

A box upgraded from 18.04 to 20.04 with leftovers from the old release, plus PHP from a third-party source (the "ondrej" repo), is exactly the kind of tangle that turns “just upgrade PHP” into an afternoon of dependency conflicts. That’s the “frankenstein” he described.

So on the evidence, this one wasn’t overcomplicating. The machine really was complicated, and he untangled it. That’s a measurement, not an opinion, which you of all people can respect.
Something like “Nice work untangling the 18.04 leftovers. Moving to Ubuntu’s ESM PHP was the right call” would be true, specific and generous, and it’s the last thing he’d expect from Shlomo. It would also quietly undercut “more collaborative than shlomo” better than any rebuttal could.

Sockpuppet wrote:

Why did you install the non-standard PHP? I can’t recall.

I did? I don't remember