{"id":5741,"date":"2026-10-26T19:14:52","date_gmt":"2026-10-26T18:14:52","guid":{"rendered":"https:\/\/rock-the-prototype.com\/unkategorisiert\/open-source-powers-our-digital-world-who-powers-open-source\/"},"modified":"2026-10-26T19:21:23","modified_gmt":"2026-10-26T18:21:23","slug":"open-source-powers-our-digital-world-who-powers-open-source","status":"publish","type":"post","link":"https:\/\/rock-the-prototype.com\/en\/it-security\/open-source-powers-our-digital-world-who-powers-open-source\/","title":{"rendered":"Open source powers our digital world. Who powers open source?"},"content":{"rendered":"

PHP2Shell shows how much responsibility underpins our digital infrastructure—and why developers, companies, and private and public funders must shape its security and future together.<\/strong><\/p>\n

On October 21, 2026, the PHP project released the security updates PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35<\/strong>. These security patches fix two critical vulnerabilities that became known as PHP2Shell<\/strong>. <\/p>\n

\"Software

Software as the Achilles’ heel of a digital infrastructure – Adapted by Sascha Block, based on “Dependency” (xkcd #2347) by Randall Munroe. Original: https:\/\/xkcd.com\/2347\/ – License: CC BY-NC 2.5 – https:\/\/creativecommons.org\/licenses\/by-nc\/2.5\/<\/p><\/div>\n

Under certain conditions, the vulnerabilities allow attackers to execute malicious code on servers without prior authentication<\/a>. Beyond manipulating websites and digital services, this also creates the risk of sensitive data falling into the wrong hands. Operators of potentially affected websites therefore took some services offline as a precaution.<\/p>\n<\/div>

\n
\n

Inhaltsverzeichnis<\/p>\nToggle<\/span><\/path><\/svg><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n