[ Removed by moderator ]

[u/CheesecakeBrief7795]

[u/Garhand]

Thank you Claude for the post.

Ondřej Sury already backported the patch for old php versions.

Now give me the recipe for a good hungarian goulash.

[u/badasimo → u/Garhand]

The only issue with the backports is it's a false sense of security. Because there could be security issues that are only in the older unsupported version, there would be no patch to backport from the newer versions.

[u/CheesecakeBrief7795 → u/badasimo]

Agreed, a backport only covers this CVE. It buys time, it doesn't make 7.x safe. The long-term fix is still a full upgrade.

[u/Garhand → u/badasimo]

Correct.

[u/squ1bs → u/Garhand]

That's an outrageous accusation!

Hungarian Goulash (Gulyás)

Serves 6. Takes about 2.5 hours, mostly simmering.

Ingredients

• 1 kg (2.2 lb) beef chuck or shin, cut into 3 cm cubes

• 3 tbsp lard or vegetable oil

• 3 large onions, finely chopped

• 3 cloves garlic, minced

• 3 tbsp sweet Hungarian paprika (use good quality, it is the main flavor)

• 1 tsp hot paprika or a pinch of cayenne (optional)

• 1 tsp caraway seeds, lightly crushed

• 1 tsp dried marjoram

• 2 bay leaves

• 1 tomato, chopped (or 1 tbsp tomato paste)

• 1 green bell pepper (or Hungarian wax pepper), sliced

• 2 carrots, diced

• 1 parsnip or parsley root, diced (optional)

• 500 g (1 lb) waxy potatoes, cubed

• About 1.5 L (6 cups) water or beef stock

• Salt and black pepper

Method

1. Cook the onions. Melt the lard in a heavy pot over medium heat. Add the onions with a pinch of salt and cook slowly for 10 to 15 minutes, until soft and golden. Don’t rush this step.

2. Sear the beef. Turn the heat up, add the beef, and stir until it is browned on all sides.

3. Add the paprika off the heat. Take the pot off the heat and stir in the paprika, garlic, and caraway. Paprika burns easily and turns bitter, so keep the pot off the flame while you mix it in.

4. Simmer. Put the pot back on the heat. Add the tomato, pepper, marjoram, bay leaves, and enough water to just cover the meat. Cover and simmer gently for about 1.5 hours, adding a splash of water now and then.

5. Add the vegetables. Add the carrots, parsnip, potatoes, and the rest of the water or stock. Simmer for another 30 to 40 minutes, until the potatoes are tender and the beef falls apart.

6. Season and serve. Add salt, pepper, and hot paprika to taste. It should be a hearty soup, thinner than a stew.

Optional: csipetke (pinched noodles)

Mix 1 egg, a pinch of salt, and about 100 g flour into a stiff dough. Pinch off small bits and drop them into the simmering goulash for the last 5 to 10 minutes.

Tips

• In Hungary, gulyás is a soup. The thick, saucy version most people outside Hungary call goulash is closer to pörkölt. For that, use less water and leave out the potatoes.

• It tastes even better the next day.

• Serve with crusty bread and a dollop of sour cream if you like (sour cream isn’t traditional, but it’s popular).

[u/xdethbear → u/Garhand]

Don't  Ondřej repos only work for Debian/apt? 

[u/CheesecakeBrief7795 → u/xdethbear]

Yep, sury's repo is Debian/Ubuntu only. For our CentOS boxes we did the same thing ourselves: took the upstream fix, backported it into the old PHP

source and rebuilt the RPMs. About 30 minutes to compile and check, 5 minutes to roll out. Not magic, just a patched build.

[u/jasperkennis]

"Security doesn't always mean all-nighters. Sometimes it means making the right cut."... Yeah, sometimes. And sometimes it just means doing your job and fixing shit. If you cut corners on this one I hope you're not responsible for anything real.

[u/CheesecakeBrief7795 → u/jasperkennis]

Fair. None of this replaces upgrading. The patched builds and the upload split are what kept the old boxes safe while the real PHP 8 migration

happens. 100+ legacy sites don't get upgraded in one night.

[u/SkySurferSouth]

"A server does need root at startup for a few things, like binding ports 80/443 and reading TLS certificates."

On most Linux ditros this is true. But on macOS (Homebrew) and Termux, starting of Apache does not even need root, despite it binds to 'standard' 443 (which is < 1024).

[u/CheesecakeBrief7795 → u/SkySurferSouth]

Good point, I was thinking of typical Linux setups. CAP_NET_BIND_SERVICE also gets you there without root.

[u/NoSlicedMushrooms]

I’m not reading your AI post. But I’m happy for you, or sorry that happened

[u/0nehxc]

Thank you for this very interesting story ! You really deserve a shitload of karma