Groups > comp.lang.php > #19620

Re: PHP Releases Urgent Fixes For Two Dangerous Flaws

Path	csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	"J.O. Aho" <user@example.net>
Newsgroups	comp.lang.php
Subject	Re: PHP Releases Urgent Fixes For Two Dangerous Flaws
Date	Tue, 27 Oct 2026 12:24:11 +0100
Lines	21
Message-ID	<nkbfurFkb5sU1@mid.individual.net> (permalink)
References	<6ADA3B7B.4930.com21237@bbs.alt119.net> <nk3c5eFag0nU1@mid.individual.net> <11bpmfi$1b04u$1@dont-email.me>
Mime-Version	1.0
Content-Type	text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding	7bit
X-Trace	individual.net x/QnN8vrqG3nyZc25KHhzAU8+UdF/eiMA9bqHh2JbtFmIHnOh7
Cancel-Lock	sha1:8f7tWSD2ZoyqTV4MEVEw5tE1r/I= sha256:/bWITbYPbo0Mg4dMYH09S3sn9clzYUeTxeQzEJGw1o4=
User-Agent	Mozilla Thunderbird
Content-Language	en-US-large
In-Reply-To	<11bpmfi$1b04u$1@dont-email.me>
Xref	csiph.com comp.lang.php:19620

Show key headers only | View raw

On 27/10/2026 09.13, Arno Welzel wrote:

> We will see many more vulnerabilities like this in the future, since AI
> tools makes it much easier to do analysis which would take weeks or
> months otherwise.

The LLMs are getting better on it, far better than before when they just 
hallucinated a lot of issues.

> Next victim: the Brotli decoder invented by Google which is available
> for Node.js and many other environments:
> 
> <https://research.jfrog.com/post/brotli2shell-beyond-node2shell-and-http2shell/>

yeah, that came a bit of as a topping on the cake.

Let see what next week will bring us.

-- 
  //Aho

Back to comp.lang.php | Previous — Previous in thread | Find similar | Unroll thread

Thread

PHP Releases Urgent Fixes For Two Dangerous Flaws "Internetado" <internetado@bbs.alt119.net> - 2026-10-22 13:36 -0300
  Re: PHP Releases Urgent Fixes For Two Dangerous Flaws "J.O. Aho" <user@example.net> - 2026-10-24 11:30 +0200
    Re: PHP Releases Urgent Fixes For Two Dangerous Flaws Arno Welzel <usenet@arnowelzel.de> - 2026-10-27 09:13 +0100
      Re: PHP Releases Urgent Fixes For Two Dangerous Flaws "J.O. Aho" <user@example.net> - 2026-10-27 12:24 +0100

csiph-web