[<prev] [next>] [day] [month] [year] [list]
Message-ID: <d4e9aa8a-91b3-4f5e-8187-fde34bb426d8@oracle.com>
Date: Tue, 20 Oct 2026 13:22:51 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: Upcoming Critical PHP Security Release
https://www.php.net/archive/2026.php#2026-10-20-1 states:
> The PHP security team would like to give advance notice of an upcoming
> security release.
>
> It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC.
>
> It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.
>
> All PHP users are encouraged to prepare now so they can upgrade as soon
> as the release is available.
>
> We reserve the right to release earlier should details of either
> vulnerability become public, or should evidence of active exploitation
> appear in the wild.
>
> Full details, affected versions, and the fixed versions will be
> published with the release.
>
> Thank you for helping us keep PHP secure.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
