Public timeline

Notices

1. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Sunday, 08-Nov-2026 14:31:29 EST Clarissa Walker
   Updates!
   
   apr-util: 1.6.5 -> 1.6.6
   httpd: 2.4.69 -> 2.4.70
2. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 07-Nov-2026 16:39:14 EST Clarissa Walker
   There's a new server update and an apr-util update...
   ...but I will do so tomorrow, as there are no mentioned CVEs in the changelog.
   
   They build fast even on the old compile-box (read: mid-2000s laptop), so not a concern at this time.
3. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Friday, 06-Nov-2026 03:34:40 EST Clarissa Walker
   Heh, I accidentally managed to reboot my main laptop instead of this server when installing security updates (kernel-related)...
   
   ...it was the wrong terminal window.
   • Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Friday, 06-Nov-2026 03:37:15 EST Clarissa Walker

     in reply to
     Other than that, I made some changes as to how MariaDB behaves again. At some point, I may upgrade to 11.8, since I do know how to compile it from source this time... since the experiment over six months ago.
4. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 05-Nov-2026 10:51:41 EST Clarissa Walker
   Updates!
   
   Security (maybe)
   php: 8.6.0RC4 -> 8.6.0RC5
5. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 05-Nov-2026 10:09:51 EST Clarissa Walker
   Okay, cannot use PHP 8.6.0RC5 with libicu79...
6. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 29-Oct-2026 18:45:09 EDT Clarissa Walker
   ...I started defragging the NAS's RAID5. That's over 17TB of data...
   This will take quite a while, and there are no backups.
   • Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 31-Oct-2026 13:13:33 EDT Clarissa Walker

     in reply to
     This finished yesterday, and it was a success.
7. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Tuesday, 27-Oct-2026 05:51:48 EDT Clarissa Walker
   Found in some ancient MySQL manual:
   
   " The official way to pronounce ``MySQL'' is ``My Ess Que Ell'' (not ``my sequel''), but we don't mind if you pronounce it as ``my sequel'' or in some other localized way. "
   
   http://osr600doc.xinuos.com/en/DB_mysql/manual.html
8. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Sunday, 25-Oct-2026 09:30:14 EDT Clarissa Walker
   Fixed the logo for this theme, and it now no longer looks awful. I think other themes use the same exact one, so I'll fix that at some point...
   • Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Sunday, 25-Oct-2026 09:31:30 EDT Clarissa Walker

     in reply to
     Nope, it just seems to be the neo-blue theme.
9. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 24-Oct-2026 17:00:20 EDT Clarissa Walker
   Okay, my PHP 7.4.33 now has a pre-patch (read: incomplete patch) for a known newer CVE. I never applied that to either supported 8.x version I have because it will make it to the next normal release cycle.
   
   PHP 5.6.40 does not have the code snippet I used from the Github repo; it does not exist in its current form.
   
   I also compiled ICU4C 79.1 for this server, but I will only apply that to the next 8.6.0 release, which is RC5.
   • Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 24-Oct-2026 17:03:46 EDT Clarissa Walker

     in reply to
     I do not consider this a true update for PHP 7.4.33... that is, until the backports start showing up for the known newer CVE.
10. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Oct-2026 18:31:21 EDT Clarissa Walker
    Ondřej Surý's patches for PHP 5.6.40 was useful for the current CVE fixes.
    
    Remi Collet's patches for PHP 7.4.33, likewise, though Ondřej Surý has those as well.
11. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Oct-2026 16:13:03 EDT Clarissa Walker
    Updates:
    
    Security, Recompile
    php: 7.4.33 - due to file replacement oversight in patching PHP
12. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Oct-2026 16:02:13 EDT Clarissa Walker
    Updates!
    
    Security
    php: 5.6.40 (EOL patch)
    
    -- PHP 7.4.33 needs to be recompiled due to user error removing other patches... current CVE patches are present, though --
13. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Oct-2026 12:46:09 EDT Clarissa Walker
    Updates!
    
    Security
    php: 7.4.33 (EOL patch), 8.5.11 -> 8.5.12, 8.6.0RC3 -> 8.6.0RC4
    • Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Oct-2026 12:49:10 EDT Clarissa Walker

      in reply to
      Funny, I forgot to remove the other half of the mitigation of those PHP versions... Done.
14. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Oct-2026 11:49:39 EDT Clarissa Walker
    Mitigation temporarily removed just for this post (as multipart is required for this section to function):
    
    Remi Collet's patch for PHP 7.4 has arrived! So, I will /try/ to look at it for PHP 5.6.
15. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Oct-2026 01:53:43 EDT Clarissa Walker
    This server has been mitigated against CVE-2026-109618 and CVE-2026-109619. I am going to have to backport patches for PHP 5.6.40 and PHP 7.4.33, however.
16. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Friday, 09-Oct-2026 10:07:46 EDT Clarissa Walker
    Updates!
    
    php: 8.6.0RC2 -> 8.6.0RC3
17. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 03-Oct-2026 16:49:06 EDT Clarissa Walker
    Finally dug out the redump.info (former .org - drama ensued) CD ripping machine for some maintenance and upgrading it from Kubuntu 24.04 to 26.04.
    
    ...It's an overbuilt machine running on two AMD Opteron Dual-Core CPUs, but the system memory capacity is pretty lacking (~4.75GB of RAM) because multiple 1GB ECC Registered DDR sticks were dying over time... otherwise it would be running on 6GB of ECC RAM.
    
    That system can theoretically run on 24GB of RAM, but that is 4GB per DDR stick, and... nah. Expensive, even back then, so 2GB per stick may be more reasonable.
18. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Friday, 02-Oct-2026 19:13:15 EDT Clarissa Walker
    Found the actual issue as to why random image loading would fail... this also affected some stuff that used a lot of Javascript.
    
    It was a misconfiguration regarding limiting IP connections on the server. It was from a modification some few months ago (probably back in the summer) when the top-level directory was meant to be limited... but it was too limited. This affected most of the website, lol.
19. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 01-Oct-2026 14:59:49 EDT Clarissa Walker
    Updates!
    
    Security
    httpd: 2.4.68 -> 2.4.69
    apr-util: 1.6.3 -> 1.6.5 (1.6.4 was security-patch)
20. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 30-Sep-2026 22:41:39 EDT Clarissa Walker
    Updates!
    
    Security
    openssl: 3.5.8 -> 3.5.9
    
    New
    libicu/icu4c: 74.2, 78.3 - compiled using gcc/g++ 13 compiler
    
    Recompile
    php 5.6.40: due to system upgrade
    php 7.4.33: due to system upgrade, needed libicu 74.2 so PHP is not forced to use c++17 standards for compiling (with c++17 flag you can use later libicu versions)
    php 8.5.11, 8.6.0RC2: due to system upgrade, initial gcc/g++ 15 to final gcc/g++13 migration, and changing from system-built libicu-78.2 compiled with gcc/g++ 15 to source-built libicu-78.3 compiled with gcc/g++ 13
    • Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 30-Sep-2026 23:49:42 EDT Clarissa Walker

      in reply to
      ... yeah, that was chaotic. Back-end has four versions of the same cURL library version , and that is because it uses different openSSL major releases.
      
      From there, there are four PHP versions, each using those different versions.
      
      Apache httpd is still using openssl 1.1.1, however.
      
      All of this is manually configured... 🫣