最新安全信息
第 11 页
9月21日周四
Drupal core - Critical - Cache poisoning - SA-CORE-2023-006
Project: Drupal core Project machine name: drupal Date: 2023-September-20 Security risk: Critical 16 ∕ 25 AC:Complex/A:None/CI:All/II:Some/E:Theoretical/TD:Default Vulnerability: Cache poisoning Affected versions: >=8.7.0 <9.5.11 || >=10.0 <10.0.11 || >= 10.1 <10.1.4 CVE IDs: CVE-2023-5256 Description: In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled…
9月14日周四
PHP 8.3.0 RC 2 available for testing
The PHP team is pleased to announce the release of PHP 8.3.0, RC 2. This is the second release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…
9月8日周五
Dutch PHP Conference 2023 - Schedule
Get ready for the Dutch PHP Conference 2023 - Online Edition! 🚀 us on October 13 for an exciting day filled with tech talks and networking. Here's a sneak peek of what's in store: Join 🌐 by Building the World: The Story behind Wolfi, the Linux undistro built for containers Erika Heidi 🚀 by Our Journey from Gitflow to Trunk Based Development Ludovic Toison 🔍 by Generics Aren't Coming Brent Roose 📚 by Internships - MBO / Medium Level Education Sophie Fischer 🐘 by How to Eat an ElePHPant: Modernize Your Legacy PHP Applications Ayesh Karunaratne 🧠 by Making PHP Smarter: Introduction of AI…
9月6日周三
PHP Conference Japan 2023
is the largest PHP event in Japan and has been held once a year since 2000. As an event for a popular language, it is attended by a wide range of web engineers, from beginners to advanced users. PHP Conference Japan 2023 Date: October 8, 2023 Location: Tokyo, Japan. For more details, See the . event page
9月1日周五
PHP 8.1.23 Released!
The PHP development team announces the immediate availability of PHP 8.1.23. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.10 Released!
The PHP development team announces the immediate availability of PHP 8.2.10. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.10 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
8月31日周四
PHP 8.3.0 RC 1 available for testing
The PHP team is pleased to announce the release of PHP 8.3.0, RC 1. This is the first release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
8月28日周一
Longhorn PHP 2023
Hosted in Austin, Texas, Longhorn PHP is back for its fifth year! This year's conference will be start with an optional tutorial day on Thursday, November 2, with main conference days on Friday and Saturday, November 3-4. Longhorn PHP is a regional conference designed to help PHP developers level up their craft and connect with the larger PHP community. Our , with Early Bird pricing available through the end of September. full schedule is available now
8月24日周四
Teknasyon PHPKonf 2023
What is PHPKonf PHPKonf, the signature event of Istanbul PHP, is a landmark for PHP enthusiasts around the world. Now stepping into its 9th year, this annual conference is renowned for its dedication to spreading knowledge and building connections within the PHP community. Join us at PHPKonf, where PHP meets Istanbul. Date: September 2, 2023 in Istanbul, Turkiye. For more information about the event, visit the website: Teknasyon PHPKonf 2023
8月21日周一
ConFoo Montreal 2024: Call for Papers is Now Open
is a multi-technology conference specifically crafted for developers. With over 150 presentations, offered by local and international speakers, the conference wish to bring outstanding diversity of content to expand your knowledge, increase developer’s skills and productivity. ConFoo Want to share your knowledge and expertise to hundreds of experts in your field? Want to be part of our talented team of renowned speakers? The team at ConFoo is looking for speakers and conference proposals for its 2024 event in Montreal. Our talks are both dynamic and educational and are set to help participant…
8月17日周四
PHP 8.3.0 Beta 3 available for testing
The PHP team is pleased to announce the third beta release of PHP 8.3.0, Beta 3. This continues the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Beta 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
Forge: Zero-Downtime Deployments
Zero-downtime deployments are now native to Laravel Forge, allowing users to avoid even brief milliseconds of downtime. Deployments of sites to multiple servers are available via Envoyer.
PHP 8.2.9 Released!
The PHP development team announces the immediate availability of PHP 8.2.9. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. Windows source and binaries are not synchronized and do not contain a fix for GH-11854. For source downloads of PHP 8.2.9 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
8月10日周四
PHPeste 2023
About the Conference Introducing , a distinguished PHP conference, championed by the resilient communities of Brazil's Northeast. Over the years, this event has graced cities including João Pessoa, Salvador, São Luis, Recife, Natal, and once again returns to the coastal beauty of Fortaleza. PHPeste Spanning two enriching days, attendees can anticipate: Dive deep into the world of PHP through hands-on sessions and workshops. Comprehensive Learning: Engage with passionate PHP enthusiasts and professionals who embody the spirit and vigor of the Northeast. Networking Opportunities: Gain insights…
8月5日周六
PHP 8.0.30 Released!
The PHP development team announces the immediate availability of PHP 8.0.30. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.30 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
8月4日周五
PHP 8.3.0 Beta 2 available for testing
The PHP team is pleased to announce the second beta release of PHP 8.3.0, Beta 2. This continues the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Beta 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rel…
PHP 8.1.22 Released!
The PHP development team announces the immediate availability of PHP 8.1.22. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.22 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
7月27日周四
Introducing Volt: An elegantly crafted functional API for Livewire
Volt is an elegantly crafted functional API for Livewire, allowing component's PHP logic and Blade templates to coexist in the same file. Behind the scenes, the functional API is compiled to Livewire class components and linked with the template present in the same file.
7月25日周二
Introducing Folio: Page Based Routing
Today, we are releasing the first beta of Laravel Folio. Folio is a powerful page-based router designed to simplify routing in Laravel applications. With Laravel Folio, generating a route becomes as effortless as creating a Blade template within your application's "resources/views/pages" directory.
7月21日周五
PHP 8.3.0 Beta 1 available for testing
The PHP team is pleased to announce the first beta release of PHP 8.3.0, Beta 1. This continues the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Beta 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
7月14日周五
CakeFest 2023: The Official CakePHP Conference
- our annual conference dedicated to CakePHP. One full workshop day (plus one hybrid day) that is an ideal way to learn as both beginners and advanced users, followed by days of presentations, discussions and talks on CakePHP related technologies. CakeFest 2023 will be held in Los Angeles, CA - we are excited to see you there! CakeFest 2023 Date: September 28, 29 & 30 Time: 09:00am PDT Check out the full schedule on CakeFest.org
7月6日周四
PHP 8.1.21 Released!
The PHP development team announces the immediate availability of PHP 8.1.21. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.21 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.8 Released!
The PHP development team announces the immediate availability of PHP 8.2.8. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.8 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.0 Alpha 3 available for testing
The PHP team is pleased to announce the third testing release of PHP 8.3.0, Alpha 3. This continues the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Alpha 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the…
6月28日周三
Vapor: Multi-level Subdomains
Vapor has always made it straightforward to deploy your application to a custom domain, subdomain, or even wildcard subdomain. However, it’s only been possible to utilize single-level subdomains - me...
6月24日周六
PHP Velho Oeste 2023
is a community that aims to move the PHP language ecosystem in the western region of Santa Catarina, Brazil, known as Velho Oeste(Old West). PHP Velho Oeste Knowledge + Networking In this event, several relevant topics will be covered, from the latest language updates to best development practices. You will have the opportunity to expand your PHP knowledge and stay up to date with the latest market trends. Date: July 29, 2023 Location: Unochapecó Noble Hall in Chapecó, Santa Catarina, Brazil. For more information about the event, visit our website: PHP Velho Oeste
6月23日周五
PHP 8.3.0 Alpha 2 available for testing
The PHP team is pleased to announce the second testing release of PHP 8.3.0, Alpha 2. This continues the PHP 8.3 release cycle, the rouch outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Alpha 2 please visit . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the re…
6月9日周五
PHP 8.1.20 Released!
The PHP development team announces the immediate availability of PHP 8.1.20. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.20 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.0 Alpha 1 available for testing
The PHP team is pleased to announce the first testing release of PHP 8.3.0, Alpha 1. This starts the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Alpha 1 please visit the . download page Please carefully test this version and report any issues found using . the bug tracking system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the…
PHP 8.2.7 Released!
The PHP development team announces the immediate availability of PHP 8.2.7. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.7 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
6月8日周四
International PHP Conference Munich 2023
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: October 23 ‒ 27, 2023 Location: Holiday Inn Munich City Centre, Munich or Online Highlights: 70+ best practice sessions 50+ international top speakers PHPower:…
PHP 8.0.29 Released!
The PHP development team announces the immediate availability of PHP 8.0.29. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.29 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
6月7日周三
Vapor: Native Runtime Deprecations
Today, we’re announcing the deprecation of a number of our native runtimes and wanted to take the opportunity to communicate what this looks like both now and moving forward.
6月4日周日
Longhorn PHP 2023 - Call for Papers
Longhorn PHP is returning for 2023! Held in Austin, TX, the conference runs from Nov 2 - Nov 4, with a tutorial day on Thursday, followed by two main conference days. We are a community-run conference for PHP developers in Texas and beyond. We are excited to bring PHP developers from all backgrounds together again for three days of fun and education. We are currently accepting talk and tutorial submissions. While the CFP is open, we also have our Blind Bird tickets available for sale. . Follow us on , , or signup for emails at to get notified with important conference updates. Register today!…
5月23日周二
Dutch PHP Conference 2023 - Call for Papers
We are back for the of the ! We hope you will join us on for the . 🐘🎉 17th edition Dutch PHP Conference October 13, 2023 online conference We’re also looking for high-quality, technical and non-technical sessions from speakers who can cover advanced topics and keep our audience inspired. We’ve had great speakers presenting talks about the PHP ecosystem, frameworks, DevOps, architecture, JavaScript, scaling, testing, performance, security and more. And we would like to advance on these very topics for this year’s conference as well. But we also would like to invite speakers to talk about non…
5月12日周五
PHP 8.1.19 Released!
The PHP development team announces the immediate availability of PHP 8.1.19. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.19 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
5月11日周四
Vapor: Farewell to Debug Logs
When Vapor handles incoming HTTP requests or queued jobs, it writes debug information to your CloudWatch logs. This includes logging when your application's configuration is cached, environment variab...
PHP 8.2.6 Released!
The PHP development team announces the immediate availability of PHP 8.2.6. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.6 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
5月2日周二
Forge: Deployment Webhook Improvements
Laravel Forge's "quick deploy" feature gives your team a seamless push-to-deploy experience. Whenever new code is pushed to your deployed branch, Forge will kick off a new deployment. This ensures tha...
4月20日周四
Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
Project: Drupal core Project machine name: drupal Date: 2023-April-19 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All Vulnerability: Access bypass Affected versions: <7.96.0 || >=9.4.0 <9.4.14 || >=9.5.0 <9.5.8 || >=10.0.0 <10.0.8 || 8.0.* || 8.1.* || 8.2.* || 8.3.* || 8.4.* || 8.5.* || 8.6.* || 8.7.* || 8.8.* || 8.9.* || 9.0.* || 9.1.* || 9.2.* || 9.3.* CVE IDs: CVE-2023-31250 Description: The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they…
4月17日周一
Vapor: Arm Architecture Support
Today we're super pumped to announce Arm powered runtimes on Vapor. Powered by AWS Graviton 2 processors, applications will see up to 20% better performance at a 20% cost reduction.
4月14日周五
PHP 8.1.18 Released!
The PHP development team announces the immediate availability of PHP 8.1.18. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.18 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.5 Released!
The PHP development team announces the immediate availability of PHP 8.2.5. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.5 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
4月4日周二
Vapor: Queue Management
Today, we're excited to announce that we're bringing queue management to the Vapor dashboard!
3月24日周五
Vapor: Application Logs Reloaded
Today, we're excited to announce that by combining the power of CloudWatch with the sleek and intuitive Vapor UI, we're making application logs available directly in the Vapor dashboard.
3月21日周二
Web Summer Camp 2023
Web Summer Camp is a conference with hands-on workshops for web developers, designers and decision-makers. Besides 2 tracks about UX/PM processes and web technologies there will be 3 tracks for non-beginner developers with hands-on workshops on topics related to JavaScript, PHP and Symfony. Take home practical knowhow on relevant tools and techniques useful in your every day work and join us in person this summer on the Croatian coast. All the information on this year's event you can find on our web site
3月16日周四
PHP 8.2.4 Released!
The PHP development team announces the immediate availability of PHP 8.2.4. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.17 Released!
The PHP development team announces the immediate availability of PHP 8.1.17. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Access bypass Affected versions: <7.95 || >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: Drupal core provides a page that outputs the markup from phpinfo() to assist with diagnosing PHP configuration. If an attacker was able to achieve an XSS exploit against a privileged user, they may be able to use the phpinfo page to access sensitive information that could be used to escalate the attack…
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-003
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 13 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: The language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages. The URL of unpublished translations may be disclosed. When used in conjunction with a module like Pathauto, this may reveal the title of unpublished content. This adv…