root@here: ~

$ php -r 'echo "hello world";'
php: refusing to run. Remote code execution, patch pending.
$ systemctl status php
● php.service - Hypertext Preprocessor
     Active: inactive (quarantined) since 21 Oct 2026
     Reason: two critical CVEs, CVSS 9.2
        Fix: 21 Oct 2026, 14:00 UTC (16:00 CEST)
$ █

PHP is taking a break

This part of the site runs on PHP, and PHP has a critical hole that gets fixed today. Until the fix is in, PHP stays switched off here. Everything that is not PHP still works.

Details: the PHP security announcement.

HTTP 503 · the fix lands at 16:00 CEST, PHP is back soon after