最新安全信息
第 12 页
3月16日周四
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-002
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 14 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: The Media module does not properly check entity access in some circumstances. This may result in users seeing thumbnails of media items they do not have access to, including for private files. This release was coordinated with SA-CONTRIB-2023-010 . This advisory is not covered by Drupal Steward . Solution…
2月15日周三
PHP 8.1.16 Released!
The PHP development team announces the immediate availability of PHP 8.1.16. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.1 users are advised to upgrade to this version. For source downloads of PHP 8.1.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.3 Released!
The PHP development team announces the immediate availability of PHP 8.2.3. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.2 users are advised to upgrade to this version. For source downloads of PHP 8.2.3 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
2月14日周二
PHP 8.0.28 Released!
The PHP development team announces the immediate availability of PHP 8.0.28. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.0 users are advised to upgrade to this version. For source downloads of PHP 8.0.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Laravel 10 Released
Today we're thrilled to announce that we have tagged the Laravel 10.0 release! Laravel 10 continues the improvements made in Laravel 9 by introducing argument and return types to all application skel...
2月7日周二
SymfonyCon Brussels 2023
is the global conference in English for Symfony and PHP developers. Two days of workshops (December 5-6) followed by two days (December 7-8) full of talks on PHP, Symfony and its ecosystem. SymfonyCon Brussels 2023 Join us and discover the amazing city of Brussels (Belgium) while you share fun and knowledge with developers from all around the World. Check out all the conference details
SymfonyOnline June 2023
is the online conference in English for Symfony and PHP developers from all around the World. Two days of online workshops (June 13-14) followed by two days (June 15-16) full of online talks on PHP, Symfony and its ecosystem. SymfonyOnline June 2023 Check out all the conference details
SymfonyLive Paris 2023
is the Symfony conference for French-speaking developers. Two days of workshops (March 21-22) followed by two days (March 23-24) full of talks on PHP, Symfony and its ecosystem. SymfonyLive Paris 2023 Check out all the conference details
2月3日周五
PHP 8.1.15 Released!
The PHP development team announces the immediate availability of PHP 8.1.15. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
2月2日周四
PHP 8.2.2 Released!
The PHP development team announces the immediate availability of PHP 8.2.2. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.2 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
1月30日周一
Vapor: Individual Queue Concurrency
Today, we're excited to announce it's now possible to set the maximum concurrency of individual Vapor queues. This new feature will allow you to ensure that not one of your queues can consume all of the available resources.
1月19日周四
Vapor: Asia Pacific (Jakarta) Region Is Now Available
Starting today, you may also choose the Asia Pacific (Jakarta) region when starting a new project on Vapor. This new region offers low latency for customers seeking to serve end-users in Indonesia.
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-001
Project: Drupal core Project machine name: drupal Date: 2023-January-18 Security risk: Moderately critical 12 ∕ 25 AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.10 || >=9.5.0 <9.5.2 || >=10.0.0 <10.0.2 Description: The Media Library module does not properly check entity access in some circumstances. This may result in users with access to edit content seeing metadata about media items they are not authorized to access. The vulnerability is mitigated by the fact that the inaccessible media will only be visible to u…
Vapor: Introducing Custom IP Ranges
One of the most requested features for Vapor is the ability to create a network with a custom IP range. Many customers ask to do this in order to configure Vapor environments to communicate with pre-...
1月10日周二
Spark 3.0 Now Available!
Today we're happy to announce that Spark 3.0 is available! Spark Stripe 3.0 includes support for Cashier Stripe 14, offering the latest compatibility enhancements with Stripe. Check out our upgrade guide to update your Spark installation to this new major version.
1月9日周一
Laravel 10 Bug Hunt
In February, we will launch the 10th major version of Laravel! It's been an amazing journey thus far and there is so much more to come. As you may know, we rely on our community to help us test new m...
1月6日周五
PHP 8.0.27 Released!
The PHP development team announces the immediate availability of PHP 8.0.27. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.27 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.1 Released!
The PHP development team announces the immediate availability of PHP 8.2.1. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.1 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.14 Released!
The PHP development team announces the immediate availability of PHP 8.1.14. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.14 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
12月20日周二
Laravel Loves PHP 8.2
Last week saw the official release of PHP 8.2, bringing with it features such as read-only classes, DNF types, and much more. As you may have noticed, we've been busy preparing the Laravel framework,...
12月17日周六
phpday 2023
Join us for the of ! On you can attend the in-person event in or online. 20th edition phpday May 18-19 2023 Verona (Italy) Organized by (the Italian PHP user group), phpday is one of the first historic European conferences dedicated to PHP, development tools and best practices. We are a community whose intent is to improve the web development ecosystem in Italy and to organize affordable, high-quality events and workshops for developers. GrUSP We are committed to , and values: we apply a and we have a . diversity inclusion accessibility Code of Conduct Scholarship program Our will be and we'r…
12月8日周四
PHP 8.2.0 Released!
The PHP development team announces the immediate availability of PHP 8.2.0. This release marks the latest minor release of the PHP language. PHP 8.2 comes with numerous improvements and new features such as: Readonly classes Disjunctive Normal Form (DNF) Types New stand-alone types: , and null, false true New "Random" extension Constants in traits Deprecate dynamic properties And much much more... For source downloads of PHP 8.2.0 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog The is…
12月7日周三
International PHP Conference Berlin 2023
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference All delegates of the International PHP Conference have, in addition to PHP program, free access to the entire range of the taking place at the same time. webinale Basic facts: Da…
12月6日周二
Forge: Circle Permissions
Circle owners can now control the level of access a circle member has to servers and sites through the use granular permission levels.
11月29日周二
Vapor: Avoid Unexpected Charges With Managed Budgets
Starting today, you may use Vapor's managed budgets when creating or editing your cloud provider. Here, you can define your monthly AWS budget in USD and configure multiple alarms to notify the team owner via email if there is a spike in costs.
11月27日周日
PHP 8.0.26 Released!
The PHP development team announces the immediate availability of PHP 8.0.26. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.26 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog Please note, this is the last bug-fix release for the 8.0.x series. Security fix support will continue until 26 Nov 2023. For more information, please check our page. Supported Versions
11月25日周五
PHP 8.2.0 RC7 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 7. This is the seventh release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 7 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also…
11月24日周四
PHP 8.1.13 Released!
The PHP development team announces the immediate availability of PHP 8.1.13. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.13 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
11月10日周四
PHP 8.2.0 RC 6 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 6. This is the sixth release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 6 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Introducing Fresh WordPress Themes
Combine the DX and performance of Fresh with the reliability and dependability of WordPress.
11月3日周四
PHP 7.4.33 Released!
The PHP development team announces the immediate availability of PHP 7.4.33. This is security release that fixes an OOB read due to insufficient input validation in imageloadfont(), and a buffer overflow in hash_update() on long parameter. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.33 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
10月28日周五
PHP 8.1.12 Released!
The PHP development team announces the immediate availability of PHP 8.1.12. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.12 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.0.25 Released!
The PHP development team announces the immediate availability of PHP 8.0.25. This is a security fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.25 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.0 RC5 available for testing
The PHP team is pleased to announce the fifth release candidate of PHP 8.2.0, RC 5. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 RC5 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
Forge: Dark Mode
Dark mode is a must-have feature for many developers and anyone who uses it often knows just how jarring it is when you're thrown into an application or website that doesn't support it.
10月20日周四
Vapor: Introducing Custom Asset Domains
In the latest release of Vapor, we've made it possible for you to serve your assets via a custom domain.
php[tek] 2023 - Chicago, IL
Join us for the 15th Annual Web Developer Conference, php[tek] 2023, May 16-18 2023. We are so excited to be bringing back php[tek] in 2023 and will be returning to the Sheraton O’Hare Hotel which is conveniently located by Chicago O'Hare Airport. php[tek] 2023 combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professionally while also providing you with the knowledge to solve your everyday problems. We are the longest-running web developer conference in the United States, focusing on the PHP programming…
php[tek] 2023 - Call for Papers
We are excited to be bringing back php[tek] in 2023 and will be returning to the Sheraton O’Hare Hotel which is conveniently located by Chicago O'Hare Airport. Whether you are a seasoned speaker or this will be your first time speaking at a conference, this is the conference you want to submit your talk to. Our panel of professional speakers will review your abstract and give pointers to help improve your chances of being selected. php[tek] 2023 combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professio…
10月17日周一
Vapor: PHP 8.2 Release Candidate Is Now Supported
Starting today, you may use PHP 8.2 Release Candidates in your Vapor environments. To get started, simply specify "php-8.2:al2" as your preferred runtime in your "vapor.yml" configuration file.
10月13日周四
PHP 8.2.0 RC 4 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 4. This is the fourth release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…
10月11日周二
Laravel: New Environment Encryption Commands
Laravel v9.32.0 saw the release of two new Artisan commands; `env:encrypt` and `env:decrypt`.
9月30日周五
PHP 8.0.24 Released!
The PHP development team announces the immediate availability of PHP 8.0.24. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.24 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.0 RC3 available for testing
The PHP team is pleased to announce the third release candidate of PHP 8.2.0, RC 3. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 RC3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
PHP 8.1.11 Released!
The PHP development team announces the immediate availability of PHP 8.1.11. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.11 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
9月29日周四
PHP 7.4.32 Released!
The PHP development team announces the immediate availability of PHP 7.4.32. This is a security release. This release addresses an infinite recursion with specially constructed phar files, and prevents a clash with variable name mangling for the __Host/__Secure HTTP headers. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.32 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2022-016
Project: Drupal core Project machine name: drupal Date: 2022-September-28 Security risk: Critical 18 ∕ 25 AC:Basic/A:Admin/CI:All/II:All/E:Proof/TD:All Vulnerability: Multiple vulnerabilities Affected versions: >= 8.0.0 <9.3.22 || >= 9.4.0 <9.4.7 CVE IDs: CVE-2022-39261 Description: Drupal uses the Twig third-party library for content templating and sanitization. Twig has released a security update that affects Drupal. Twig has rated the vulnerability as high severity. Drupal core's code extending Twig has also been updated to mitigate a related vulnerability. Multiple vulnerabilities are pos…
9月23日周五
Vapor: Managing DNS
In this post, we'll discuss the different approaches to managing your DNS when attaching a custom domain to your Vapor project.
Nova: New Features You May Have Missed
Let's take a moment to highlight some great new features you may have missed in Nova version 4.
9月15日周四
PHP 8.2.0 RC2 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 2. This is the second release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…
Vapor: Free Sandbox Accounts
Introduding Vapor sandbox accounts. Get started with Vapor for free and see how quick, easy and painless it is to provision, deploy and manage your Laravel application in a serverless environment.