If you are using a distro with long term support (LTS), like I am, they backport the patch to the version that they have.

I am on Ubuntu Server 24.04 LTS, and the change was from

8.3.6-0ubuntu0.24.04.11
To
8.3.6-0ubuntu0.24.04.12

So, .11 to .12.

This should have been posted before 10 am EDT.

Ubuntu LTS (26.04, 24,04, and 22.04) got the fix yesterday, as patches to the existing PHP version.

This is from 24.04:

Upgraded:
        php8.3-bcmath:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-cgi:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-cli:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-common:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-curl:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-dev:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-fpm:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-gd:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-mbstring:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-mysql:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-opcache:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-phpdbg:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-readline:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-xml:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12
        php8.3-zip:amd64 8.3.6-0ubuntu0.24.04.11 => 8.3.6-0ubuntu0.24.04.12

There is now a PHP2Shell.

... an attacker without a login can run code on Magento 2.4.9, WordPress 7.1.2, Drupal 11.4.3, Joomla 6.1.4, MediaWiki 1.46.2, Roundcube 1.7.4, phpMyAdmin 5.2.3, Nextcloud 35.0.1, Laravel 13.11, Symfony 8.1 and WHMCS. The exploit tool PHP2Shell, credited to Calif, combines both bugs into one attack that needs no login.

There will be lots of hacked sites in the coming days and weeks.

How about this for punditry?

Cringley thinks Apple and Intel are merging.

Also, there has been a recurring comment here on Slashdot about Robert X Cringley, with all sorts of claims allegedly made by him. However, it is posted anonymously, and does not provide sources..

The "working at Apple as employee #12" part appears on a speaker biography.

The same bio also says he taught for several years at Stanford.

This Reddit comment says that he claimed he has a PhD from Stanford when he worked at Infoworld.

This page has more of his claims (invented the trash can icon, ...), and details his foray into Kickstarter and Minecraft.

So, lots of questions about him, to say the least ...

- It's impossible to prove anything. Somalia was in the midst of a civil war, there are no records.

The civil war is not even the case.
I have a Somali friend who was born perhaps two decades before the civil war started in 1990.

He told me that he does not know when he was born, simply because there are no birth records in Somalia. He needed this info to apply for something in a Western country.

He said the only way to know for sure is to go to the village elders who will remember when he was born based on a certain event (natural disaster, war, or other notable event).

With people displaced and such in the civil war, it could only be worse ...

Polar circle?
Oh you mean the Arctic Circle.
Hardly ...

I live at latitude 43.44 N.

That is south of Florence Italy, and Nice and Cannes, France.
Also south of Madison, Wisconsin, and Minneapolis Minnesota.

And the most populous places in Canada are nearby.

But yeah, to Americans, we are "up north", so we have to be in the Arctic Circle.

Finally!

Someone who gets it ...

The editors massacred the submission, making the actual point obscure ...

The point they make is: "It is highly likely that the twice annual clock change will be abolished by legislators. When that happens we should go to standard time and NOT summer time".

But, if you read the vast majority of comments, they totally miss the points the researchers made. Some of them are highly upmodded even ...

The following was in my submission on the firehose, but the editors opted to remove it ...

Some of the key points, from the published article's summary:

1. Permanent DST preserves later evening light that may facilitate commuting, recreation, social participation, and some economic activity, but it also prolongs darkness on winter mornings, with potential adverse effects on circadian alignment, sleep, mood, education, and productivity.
2. Permanent ST is more closely aligned with circadian biology, although earlier dusk may limit some evening activities.
3. Choosing Permanent ST is supported by accumulated evidence related to health and the recommendations of major sleep and chronobiology societies; if Canadian jurisdictions choose to adopt Permanent DST, implementation should include anticipatory mitigation, protection for disproportionately affected groups, and transparent surveillance of population health impacts.

Unfortunately, it seems that politicians and a good chunk of the public prefer Permanent DST.

I used various Raspberry Pi's over the past decade, starting with the Pi B+, then Pi 3 B , then Pi 4.

The Raspberry Pi's have support in mainline distros (e.g. Debian and Ubuntu), so that is why their support is good, compared to the more powerful SBC's that have 'one hit wonder' Linux releases (Odroid, Banana Pi, Orange Pi, ...etc), then no support after that.

Although, something similar happened to me on the Pi 3 B: I am stuck with Ubuntu 22.04 LTS, and can't upgrade to 24.04 LTS or later, because they stopped support for 32bit ARM.

And the Pi suffer in other ways:

Power consumption used to be the Pi's forte, but now when you buy a mini PC, say with an Intel N100, you get low power consumption, and the difference between that and Pi's is negligible. For example, the N100 TDP is 6W, and the i5-1135G7 is 15W. Both are found in mini PCs these days, as well as other Intel and AMD CPUs.

6W means if you run it 24/7 at 25% utilization, and electricity cost is $0.25/kWh (Ontario's summer rate), your consumption is a whopping $3.28 PER YEAR.

Then there is hardware support. When you buy a mini PC, you get things included, such as a case, a fan (for some models that require it), upgradeable RAM, SATA connectors, an M.2 slot, and so on. Some of that is available on Raspberry Pis, but usually as a HAT or kit, for extra dollars ...

The experience with a mini PC is just as seemless as a laptop or a desktop: there is no difference at all in installation, upgrades, ...etc.

I was on Kubuntu for many years as my sole desktop.
Then I ran into trouble upgrading (though I always stuck with LTS releases, never in between ones).

I switched to Xubuntu (XFCE), and never looked back.
There are sure some areas with more functionality in KDE, but I don't miss them at all.
XFCE stays out of the way, and allows you to focus on the applications.

The corresponding author is Subir Sarkar.

He is a professor at Oxford who has done some interesting work about the expansion of the universe is NOT accelerating.

Instead, he is saying that there is a dipole effect because earth, and the galaxy cluster that we are in, are all moving in space, and that gives the effect of accelerating expansion!

He provides compelling evidence (for a non-specialist at least) for what he says and also casts doubts on the evidence for acceleration by analyzing their data (supernovae as standard candles, and their red shift), since a dipole effect is observed on that.

If his hypothesis is confirmed by other research and observations, then the 2011 Nobel Prize for Saul Perlmutter and Adam Reiss maybe for nothing ...

Watch his lecture on Beyond The Cosmological Standard Model.

This latest paper is yet another analysis towards that.

Let us see which hypothesis is supported by the evidence, current and future ...

Freenet is also based on middle-out compression.

No. Trying to push 30TB into Freenet will be interpreted as an attack on the network by other peers and they'll disconnect from your peer.

Freenet is better viewed as a communication medium than a storage medium. Data is prioritized according to demand, somewhat like an LRU cache. You can't upload 30TB and expect the network to preserve it for you.

On liability, running a Freenet peer is more like running network infrastructure that automatically routes and caches other people's traffic than intentionally publishing it. US law explicitly recognizes this distinction in the DMCA's provisions for transitory network communications and system caching. We discuss this in more detail in the FAQ.

You obviously haven't tried Freenet. You can join our room on River and you'll see no spam, no fraud, no hate speech, none of that.

Decentralized doesn't mean unmoderated. Systems built on Freenet can be moderated however their creators and communities want. River is moderated.

The difference is that nobody running one service gets to decide what everyone else is allowed to run.