php2shell incident report

Due to the recent discovery of an extremely powerful vulnerability in PHP, I had to do baby's first vulnerability solve for some of my self-hosted applications. Over the past year I've gotten quite into self-hosting, and I've talked about it a bit on this blog specifically. I try and maintain a relatively safe network between my various devices, and this was the first time that I was seriously spooked by a public vulnerability. I'm not smart enough to explain exactly what was going on with PHP, but I could figure out the obvious: The versions of PHP in some of my docker containers were vulnerable, and I had to update them in order to keep them safely exposed to the public web. Docker is a funny little system — in order to facilitate a simpler install process, each Docker package runs within a 'container', which is pulled from a central repository. So in order to update these packages, I had to take them offline and wait until patches were pushed to those central repositories. Using a…