An Oracle LTS customer reports that Oracle could not provide a straight answer regarding an OL7 patch during the PHP vulnerability remediation, leading them to patch with GetPageSpeed and consider...

{
  "signal_id": "07fed09b-ec1d-538a-a9d3-64fd3cfa5673",
  "signal_type": "reddit-company",
  "signal_subtype": "customerFeedback",
  "detected_at": "2026-10-24T09:16:31+00:00",
  "company": {
    "name": "Oracle",
    "domain": "oracle.com"
  },
  "data": {
    "nsfw": false,
    "stage": "considering",
    "awards": 0,
    "timing": "ongoing_state",
    "topics": [
      "lts",
      "patching",
      "linux",
      "contract renewal"
    ],
    "post_id": "1xe41b9",
    "summary": "An Oracle LTS customer reports that Oracle could not provide a straight answer regarding an OL7 patch during the PHP vulnerability remediation, leading them to patch with GetPageSpeed and consider not renewing their Oracle contract next year.",
    "category": "support",
    "comments": [
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rkrls8vx9gj/",
        "depth": 0,
        "score": 277,
        "author": "Confident_Dare_1578",
        "excerpt": "security team dropping the ball while the engineers vanish right before the patch drops is peak corporate coordination",
        "posted_at": "2026-10-24T09:29:44.000Z",
        "author_url": "https://www.reddit.com/user/Confident_Dare_1578/"
      },
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rku35ho4kkj/",
        "depth": 0,
        "score": 112,
        "author": "kosh_neranek",
        "excerpt": "Security teams 🫣 in our place I don't even consider them part of IT. I call them \"report forwarding team\". Think the whole industry would benefit if only people with proven 10+ years of sysadmin/infra experience would be allowed to take \"security certs\". Yes it's discriminating, and one could also have 10 x 1 years experience. But it would sure improve a lot",
        "posted_at": "2026-10-24T10:25:23.000Z",
        "author_url": "https://www.reddit.com/user/kosh_neranek/"
      },
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rkszllqk9wg/",
        "depth": 0,
        "score": 45,
        "author": "the-cock-slap-phenom",
        "excerpt": "Security teams are usually not that helpful, and it’s a shame because it’s such an important role (in theory).\n\n They only point out problems and try their best to cover THEMSELVES, rather than do anything meaningful to fix the issue or help the company or customers.\n\n They can’t explain the importance or understand the risk, they can’t help with how to remedy the issue, and they don’t do a good j",
        "posted_at": "2026-10-24T10:00:46.000Z",
        "author_url": "https://www.reddit.com/user/the-cock-slap-phenom/"
      },
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rkt5zem9wys/",
        "depth": 0,
        "score": 14,
        "author": "CharacterUse",
        "excerpt": "for some reason decided to all go offline about an hour before the release\n\n That would be about 12:45-13:00 UT (they released a little early), which is about 6:15-6:30 pm in India. In other words, they finished their work day and went home instead of waiting for the patch.",
        "posted_at": "2026-10-24T10:04:44.000Z",
        "author_url": "https://www.reddit.com/user/CharacterUse/"
      },
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rku961dqhpf/",
        "depth": 0,
        "score": 14,
        "author": "mb194dc",
        "excerpt": "This exploit is nearly impossible to use in the real world. Imagine the time being wasted on this and how many times Doris will be clicking links, helpdesk will be resetting credentials and the real bad guys probably compromised proprietary software you're using...\n\n Complete insanity.",
        "posted_at": "2026-10-24T10:29:08.000Z",
        "author_url": "https://www.reddit.com/user/mb194dc/"
      },
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rkuuo9ozqjk/",
        "depth": 0,
        "score": 7,
        "author": "jetlagged-bee",
        "excerpt": "This has done wonders for the security of the internet as a whole really. A global effort to patch something that runs on 70% of the internet, albeit a PITA, can only make us safer.\n\n I'm sure most people have improved their patching processes as a result (myself included, as it finally forced me to jump to the terraform/caddy/docker setup I've always planned to do), so the next major incident wil",
        "posted_at": "2026-10-24T10:42:32.000Z",
        "author_url": "https://www.reddit.com/user/jetlagged-bee/"
      },
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rkworlomkgy/",
        "depth": 0,
        "score": 5,
        "author": "coalsack",
        "excerpt": "Ah yes, an organization that lacks proper inventory management and lifecycle management that would benefit from proper handoffs and RASCI focuses blame and frustration on a team that was at the end of their shift and a team they have unspoken expectations about.",
        "posted_at": "2026-10-24T11:23:42.000Z",
        "author_url": "https://www.reddit.com/user/coalsack/"
      },
      {
        "url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/comment/19rkyf1jz1u01/",
        "depth": 0,
        "score": 3,
        "author": "LooseEthernet",
        "excerpt": "finding v5 in the wild is a special kind of horror lol. you arent patching a server, youre performing an archaeology dig",
        "posted_at": "2026-10-24T12:02:29.000Z",
        "author_url": "https://www.reddit.com/user/LooseEthernet/"
      }
    ],
    "evidence": [
      "[comment u/wezelboy] We pay Oracle for LTS, and they couldn't give me a straight answer on if they were going to issue a patch for OL7.",
      "[comment u/wezelboy] Ended up patching with GetPageSpeed. We might not renew our contract with Oracle next year."
    ],
    "virality": "very_high",
    "post_date": "2026-10-24T09:16:31.000Z",
    "post_kind": "text",
    "post_text": "I run a webhosting platform at my job; both Internet and intranet. The internet part could have been pretty close to perfect, we identified sites using PHP after the pre announcement and was pleased to find that everyone was on 8.5 or 8.3, was truly expecting at least one to be running 7; we also warned the engineering to get the patch downloaded as soon as it was out (I don’t manage them), but they are all in India and for some reason decided to all go offline about an hour before the release. Their manager eventually got one back and online around 8pm BST & we were done around 3 hours later. But still a missed opportunity to be even better.\n\nThe security team however were pretty close to useless, the alert had been out all day and nothing was done to attempt to identify servers running PHP and it took them until 7pm BST to even involve the major incident team (which was something I wanted to do but was told to leave it to security as there would be more systems involved than mine)\n\nAnd here we now are, on Saturday, the external sites all patched and secure so now we move onto the internal sites; we’ve found v5 and v7 all over the place and a bunch of apps with no engineering team to get them upgraded as they left and were never replaced, this part will be a nightmare",
    "sentiment": "negative",
    "subreddit": "sysadmin",
    "event_date": "2026-10",
    "post_flair": [
      "Rant"
    ],
    "post_title": "PHP2Shell: notes from the field",
    "prominence": "aside",
    "source_url": "https://www.reddit.com/r/sysadmin/comments/1xe41b9/php2shell_notes_from_the_field/",
    "entity_role": "vendor",
    "post_author": "shelfside1234",
    "upvote_ratio": 0.9318885448916409,
    "mention_count": 7,
    "mention_surge": true,
    "subreddit_url": "https://www.reddit.com/r/sysadmin/",
    "total_upvotes": 279,
    "comments_total": 91,
    "total_comments": 91,
    "event_date_text": "next year",
    "other_companies": [
      {
        "name": "GetPageSpeed",
        "role": "alternative",
        "domain": "getpagespeed.com"
      }
    ],
    "post_author_url": "https://www.reddit.com/user/shelfside1234/",
    "signal_category": "feedback",
    "comments_included": 12,
    "products_mentioned": [
      "Oracle Linux 7",
      "OL7"
    ]
  }
}

curl https://signals.autobound.ai/v1/signals/07fed09b-ec1d-538a-a9d3-64fd3cfa5673 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"oracle.com","limit":20}'