@laravelnews creator @mostlytechpod partnerships @phpnewsnet co-founder 📧 [email protected]
Gastonia, the gateway to CLT
Joined January 2009
- Tweets39K
- Following727
- Followers28.8K
- Likes12.1K
Eric L. Barnes retweeted
"The Foundation says distributors were still packaging fixes. Every one of them held back so that nobody would be left exposed while someone else had a head start. Chainguard decided, without the PHP team, that its read of the risk outweighed everyone else's, and everyone else had to scramble." - @ericlbarnes
Chainguard Broke the php2shell Embargo
phpnews.net/chainguard-php2s…
When I go to conferences and see everyone asking for your LinkedIn I realize I live in a Twitter bubble.
Eric L. Barnes retweeted
Massive uptick in Shifts today. Almost reaching levels of a major Laravel release. While I know today was stressful for a lot of people, I am glad to see so many taking this opportunity to upgrade outdated Laravel applications.
~100 vendors held the php2shell embargo.
Chainguard didn't.
Chainguard Broke the php2shell Embargo
phpnews.net/chainguard-php2s…
Eric L. Barnes retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Eric L. Barnes retweeted
🚨 Critical PHP vulnerability update 🚨
Patched PHP versions have officially been released!
Here is the latest status on FrankenPHP:
⚙️ Binaries: FrankenPHP 1.13.1 binaries with patched PHP 8.5 are currently building: github.com/php/frankenphp/ac…
🐳 Docker: Waiting on upstream patched Docker images before rebuilding ours
🏷️ Next Release: FrankenPHP 1.13.2 (including unrelated bug and security fixes) will be tagged as soon as 1.13.2 binaries and Docker images are ready
💙 Maintaining open-source projects takes serious effort. Consider supporting the work via GitHub Sponsors and donating to the PHP Foundation!
I love that I'm running on Laravel Cloud today. 🙌
"No manual action is required."
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.
Just one of the big advantages of running Cloudflare in front.
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Eric L. Barnes retweeted
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.
Alright who is handing out Laravel stickers at #allthingsopen and why have we not met? 😅
😂😂
I cannot thank @ericlbarnes for getting me out of a tight financial spot!
Dashboard Affirmational is now free to use for another month!!!
dashboard-affirmational.lara…
Eric L. Barnes retweeted
154: Ian Laravel New'd Again!
youtu.be/PvHtaJGH99g
@IanLandsman and @aarondfrancis talk about Laravel New'ing....again....and what that means for Outro, plus huge updates coming to Solo, Aaron's generative universe, and more.
