11
A reminder that upgrading your server might shut down parts of the security related components and leave services unintentionally exposed.
Upgrading should not be done without proper filtering of unwanted incoming traffic (via for example a firewall in front of the server).
Here we can see some database passwords and cryptographic secrets exposed during #debian13 upgrade due to PHP being down while the httpd was not.
#infosec #cybersecurity
@harrysintonen@infosec.exchange this really shouldn't happen, and I wonder what the exact config here is. In an fpm setup, which I believe is the common thing these days, you would not have your fpm daemon run, and your server returns an error.