RE: https://fosstodon.org/@php/117474977977509509
I have to patch some servers that I maintain on a familial basis but I am not calling myself a "PHP user" when I do so, sorry
The PHP security team is giving advance notice of an upcoming security release scheduled for Wed, 21 October 2026 at 14:00 UTC, addresses two critical vulnerabilities, both rated CVSSv4 9.2. All PHP users are encouraged to prepare so they can upgrade immediately tomorrow. Should
FosstodonPHP (@[email protected])The PHP security team is giving advance notice of an upcoming security release scheduled for Wed, 21 October 2026 at 14:00 UTC, addresses two critical vulnerabilities, both rated CVSSv4 9.2. All PHP users are encouraged to prepare so they can upgrade immediately tomorrow. Should details of the vulnerabilities become public, or should evidence of active exploitation appear we will release sooner.