Tag
CVE-2026-109618 and CVE-2026-109619 are two critical PHP flaws (CVSS 9.2) that allow unauthenticated remote code execution. They affect PHP 8.2, 8.3, 8.4 and 8.5 below 8.2.35, 8.3.36, 8.4.27 and 8.5.12, released on 21 October 2026. The only complete fix is to update and restart every PHP worker.
restic is the encrypted, deduplicated, incremental backup tool I run in production on several servers. A practical guide to installing it on Debian, setting up an S3-compatible repository, automating daily backups with systemd, and verifying that restore actually works before you need it.
This guide installs PostgreSQL 18.6 with pgvector 0.8.7 on Debian or Ubuntu from the PGDG repository, creates a dedicated role and database, tunes memory, builds an HNSW index and checks it with EXPLAIN. Version 0.8.7 fixes CVE-2026-103484, a buffer overflow in IVFFlat index builds.
Installing Docker on Debian 13 means replacing Debian's docker.io package (26.1.5) with the official repository: store the key in /etc/apt/keyrings/docker.asc, declare the repository in docker.sources, install docker-ce, docker-ce-cli, containerd.io, docker-buildx-plugin and docker-compose-plugin, then set log rotation and live-restore in daemon.json before exposing the server to production.
