PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

aws.amazon.com - 76 poäng - 19 kommentarer - 4955 sekunder sedan

Kommentarer (7)

hayd - 2269 sekunder sedan
Update: After posting this Amazon security released a bulletin to say we should see the updates _some time tomorrow_. https://aws.amazon.com/security/security-bulletins/2026-143-...
Scant messaging throughout the day. I don't understand why AWS, seemingly, didn't have prior knowledge of this/have it ready very soon after the CVE announcement.
mikeweiss - 3016 sekunder sedan
Amazon has a bad track record for delivering critical updates quickly. During the Copy Fail - CVE-2026-31431 event they were behind every major Linux distro in updating Bottlerocket OS
otterley - 2330 sekunder sedan
Patch releases are currently scheduled for tomorrow (October 22): https://aws.amazon.com/security/security-bulletins/2026-143-...
80fj0348i - 1959 sekunder sedan
Honest question: Does anyone actually use Amazon Linux in production? Everywhere I've every worked used a mainstream distro for cloud servers, like Debian, Ubuntu, Red Hat or SUSE.
- 294 sekunder sedan
pier25 - 1055 sekunder sedan
sounds like they are trying to get rid of users of Amazon Linux honestly
hayd - 4870 sekunder sedan
comment in question: https://github.com/amazonlinux/amazon-linux-2023/issues/1148...