Patch PHP RCE now, Python drops eMudhra CA, Postgres disk trap | The Platform Radar
Three of this week's five Python releases ship as source only, and the PHP advisory is critical. Here is the order to patch in, plus the Postgres setting most teams never check.
A patch-heavy week for platform teams. You get a ranked upgrade list: the critical PHP remote code execution fix, the Python releases that stop trusting compromised eMudhra intermediate keys and which ones ship as source only, the tarfile and cookie fixes, one Postgres setting to check for crash leftovers on disk, and the Node 22 and Terraform 1.16.7 point releases. Then, where survey data says agent lock-in really…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.