Particle.news
Get it on Google Play
Download on the App Store
9 ARTICLES
·
9h ago

Critical PHP Flaws Force Widespread Site Maintenance

Published patches require immediate updates or taking unpatched servers offline to prevent remote code execution.

[Imen Ben Youssef / Hans Lucas / Hans Lucas via AFP]
Image
Plusieurs sites internet français, dont ceux de ministères, préfectures et grands médias, sont inaccessibles afin de corriger des failles de sécurité situées dans un protocole de programmation très utilisé sur internet
Image

Overview

  • The PHP Foundation released security updates on Wednesday, October 21, prompting CERTs in Europe and the NSA to urge immediate patching or temporary takedowns of exposed services.
  • At ANSSI's request the French Interior Ministry put all exposed government sites, including every préfecture site, into preventive maintenance while teams apply the fixes.
  • Security firms reported early exploitation attempts and estimated large exposure, with Palo Alto Networks identifying millions of vulnerable platforms and Cloudflare warning of emerging attacks.
  • Published fixes cover maintained PHP branches such as 8.5.12, 8.4.27, 8.3.36 and 8.2.35 while older unsupported versions may require migration rather than simple patching.
  • Smaller sites on shared hosting face the greatest delay in remediation, which could prolong risk to users and public services and force more organizations to shift announcements to social channels and paper postings.