Re: Request for Assurance Regarding Reported PHP Vulnerability

From: Álvaro Herrera <alvherre(at)kurilemu(dot)de>
To: Miguel Pinto1 <Miguel1(dot)Pinto(at)haringey(dot)gov(dot)uk>
Cc: "pgsql-hackers(at)lists(dot)postgresql(dot)org" <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Re: Request for Assurance Regarding Reported PHP Vulnerability
Date: 2026-10-25 20:50:56
Message-ID: at5hgOjMUKbM5jlN@alvherre.pgsql
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hello Miguel,

On 2026-Oct-22, Miguel Pinto1 wrote:

> As a supplier to the council, we are contacting you.
>
> Organisations are aware of the current news regarding the announced
> PHP Vulnerability.
>
> Please can you confirm if you have been impacted by this, what plans
> are in place to remediate.

We don't use PHP, except for the wiki site, which has already been
updated.

I wonder if we should post a statement about that in the main website,
to forestall every single council in the world contacting us to ask.

I'm glad that institutions of all kinds are now worried about
cybersecurity. For years, many have been very lax about that, probably
because of not understanding the implications; this PHP fiasco has made
many people very concious about this topic, which cannot but be a good
thing.

Regards

--
Álvaro Herrera 48°01'N 7°57'E — https://www.EnterpriseDB.com/

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Hariadi Wicaksana 2026-10-25 20:56:28 Unsubsribe
Previous Message Cagri Biroglu 2026-10-25 20:48:00 Re: Per-table resync for logical replication subscriptions