Телеграм канал «DevOps'lashamiz ♾️»

here is the proof 😭

sizlar uchun yana bir bor ajoyib content 👩‍💻

made with AI by my DevOps shogird & PHP engineer 😄️️️️️️

tinchmi?

tinch emas,

🚨PHP critical vulnerability chiqqan 😄️️️️️️🐘

https://www.php.net/archive/2026.php#2026-10-21-5

Yangi aniqlangan PHP’dagi CVE-2026-109618 va CVE-2026-109619 zaifliklari serverda masofadan kod bajarilishiga olib kelishi mumkin. Har ikkisi CVSS v4.0 bo‘yicha 9,2 ball olgan.
21-oktabr 19:00 Toshkent vaqti bilan PHP global miqyosda yangilaaa dedi hammaga, lekin bilaman judaa koplaaab tashkilotlar O'zbekistonda hali yangilamagan, shunga yetkazing PHP team va DevOps larga, heads-up de endi, gigiyenaga chaqiruv har doimgidek

etishadiku bitta hashar qivorelik dib

Kim riskda: PHP-FPM, mod_php lik Apache, php-cgi, FrankenPHP va LiteSpeed ishlatadigan PHP web requestlarga ega ilovalar. mod_php uchun risk eng baland ekan, autentifikatsiyadan o'tmagan zapros ilova kodi run bo'lishidan oldin hujum (masofadan) hujum boshlashi ya'ni malicious script run qilishi mumkin ekan...

darhol 8.5.12, 8.4.27, 8.3.36 and 8.2.35 shu versiyalardan biriga ko'taringlar!!!

man o'zimizda nima qildim:

- FROM php:8.2-fpm-alpine3.19
+ FROM php:8.2.35-fpm-alpine3.24


shuningdek php.ini faylida shuni qo'bqo'ysez yaxshi (Laravel ligiga bogliq):

[Session]
; CVE-2026-109619 (PHP2Shell, stale request state) uchun yechim. Laravel o'zining session handling mexanizmini ishlatadi
; va PHP ning native upload-progress malumotini hech qachon o'qimaydi, shuning uchun buni o'chirib qo'yish lozim.
; php.ini orqali set qilishi kerak quyidagi faylda, ini_set() orqali emas...

session.upload_progress.enabled = Off

NGINX va Git bo'yicha material va savollar to'plamini yukladim

https://app.notion.com/p/DevOps-Roadmap-from-zero-by-DevOpslashamiz-378fcb1ef16d806885cbdebbf21770c1?source=copy_link#3f3fcb1ef16d809e8b74e8bd2fc94d2c