PHP vulnerability & emudhra root cert compromise

erik_fazzim · October 24, 2026 at 10:46 PM

I just found out about the critical PHP vulnerabilities that were making its rounds, even on mainstream media news sites: https://patchstack.com/articles/php-m…-alert-10-2026/

as well as the emudhra root certificate comprimises: https://emudhra.we-have-a-problem.com/

I'm on libreelec generic 12.2.1, looks like the kodi docker addon is version 12.2.0.4, do I have to update my system or worry about the vulnerabilities?

Thanks in advance!

**chewitt** · October 25, 2026 at 4:23 AM

Quote from erik_fazzim

Do I have to update my system or worry about the vulnerabilities?

Nothing in the OS uses PHP and the laughably weak certs were revoked upstream so there is nothing to do. If you have installed containers that use PHP that's your responsibility to check and update if needed.