~/blog / topic / security
Vulnerabilities & patches: check, prioritise, fix
When a critical vulnerability is announced, the headline matters less than three questions: am I affected, how fast can I find out, and how do I patch without downtime? Here I collect my checklists from operations, with commands you can run right away.
Three critical NGINX flaws: less dramatic than PHP2Shell, but patch them quickly anyway
NGINX fix in 1.30.6 and 1.31.7 (Plus 37.1.0.1, 37.0.5.1): which configurations are affected, how to check them and how to update containers.
Mitigating PHP2Shell when no update exists yet: php.ini settings for NAS, Plesk and your own servers
No PHP update yet, e.g. on Synology? Three php.ini settings shrink the PHP2Shell attack surface. Guide for Web Station, Plesk and servers.
PHP emergency patch (PHP2Shell): how to check and patch your servers
Two critical PHP flaws, fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35: where PHP really runs, how to check the version, patch and restart — with a worked example.