Latest security news
Page 14
Tue, March 22
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-006
Project: Drupal core Project machine name: drupal Date: 2022-March-21 Security risk: Moderately critical 11 ∕ 25 AC:Complex/A:None/CI:None/II:Some/E:Theoretical/TD:Default Vulnerability: Third-party libraries Affected versions: >= 8.0.0 <9.2.16 || >= 9.3.0 <9.3.9 CVE IDs: CVE-2022-24775 Description: Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle has released a security update which may affect some Drupal sites. We are issuing this security advisory outside our regular Drupal security release window schedule since Guzzle has alr…
Fri, March 18
PHP 8.1.4 Released!
The PHP development team announces the immediate availability of PHP 8.1.4. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, March 17
PHP 8.0.17 Released!
The PHP development team announces the immediate availability of PHP 8.0.17. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-005
Project: Drupal core Project machine name: drupal Date: 2022-March-16 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Third-party libraries Affected versions: >= 8.0.0 <9.2.15 || >= 9.3.0 <9.3.8 CVE IDs: CVE-2022-24728 CVE-2022-24729 Description: The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal . Vulnerabilities are possible if Drupal is configured to allow use of the CKEditor library for WYSIWYG editing. An attacker that can create or edit content (e…
Fri, February 18
PHP 8.0.16 Released!
The PHP development team announces the immediate availability of PHP 8.0.16. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.3 Released!
The PHP development team announces the immediate availability of PHP 8.1.3. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.3 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, February 17
PHP 7.4.28 Released!
The PHP development team announces the immediate availability of PHP 7.4.28. This is a security release. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004
Project: Drupal core Project machine name: drupal Date: 2022-February-16 Security risk: Moderately critical 12 ∕ 25 AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Information disclosure Affected versions: >= 8.0.0 <9.2.13 || >= 9.3.0 <9.3.6 CVE IDs: CVE-2022-25270 Description: The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module (which comes with the Standard pr…
Fri, February 11
Laravel 9 Now Available!
This week we shipped Laravel 9.0 - the exciting next chapter in our journey to make web development enjoyable and productive! Laravel 9 continues the improvements made in Laravel 8.x by introducing s...
Tue, January 25
phpday 2022
The Italian PHP user group GrUSP is pleased to announce the of , taking place on May 19-20th, 2022. This edition is going to be hybrid: it takes place in Verona (Italy) and will also be accessible online! 19th edition phpday phpday is one the first historic European conferences dedicated to PHP development, technologies and management. Our will be open until Feb 2nd and the speaker line up will be announced soon after. CFP Don't miss the opportunity to take part to this amazing event with international speakers from all over the world Follow us on and Twitter Facebook
Fri, January 21
PHP 8.1.2 Released!
The PHP development team announces the immediate availability of PHP 8.1.2. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.2 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, January 20
PHP 8.0.15 Released!
The PHP development team announces the immediate availability of PHP 8.0.15. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, January 11
Deploying Soketi to Laravel Forge - Part 2
In Part I of this tutorial we learnt how to install and deploy Soketi to our Laravel Forge servers. Currently, Soketi is accessible over our server's IP address, behind port 6001. In this post we're going to modify our setup so that we can access our socket server via socket.my-domain.com. We'll do this by using an Nginx reverse proxy.
Thu, January 6
Managing Disk Space With "ncdu"
Linux ships with a useful command called `du` (Disk Usage), which is used to find the size of files and directories. When provisioning your server, Forge installs `ncdu` which is an advanced version of `du` that allows you to easily navigate your directories via an ncurses interface. This makes it much quicker to identify large files and directories.
Wed, January 5
Deploying Soketi to Laravel Forge
Soketi is a simple, fast and resilient open-source WebSockets server written in Typescript. It's fully compatible with the Pusher v7 protocol which makes it a great replacement to Pusher when using Laravel Echo.
Tue, December 21
Dutch PHP Conference 2022 - Call for Papers
We are back for the 16th edition of the Dutch PHP Conference! The 2022 in-person edition features 2 conference days on July 1 & 2, 2022 at RAI Amsterdam. The Call for Papers of Dutch PHP Conference 2022 is now open! You can submit your papers up to and including January 30th and as many proposals as you like, so please start submitting! Check out for content briefing and more info. cfp.phpconference.nl
Sat, December 18
PHP 8.1.1 Released!
The PHP development team announces the immediate availability of PHP 8.1.1. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.1 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Fri, December 17
PHP 7.4.27 Released!
The PHP development team announces the immediate availability of PHP 7.4.27. This is a bug fix release. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.27 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Wed, December 15
Servers for Artisans: The Next Generation
During Laracon NYC 2014, Taylor Otwell, the creator of Laravel, announced both Laravel Homestead and Laravel Forge, instantly simplifying the entire process of building Laravel applications - from first download to final deployment.
Log4j Vulnerability Update
Log4j is a Java library by Apache used to log debug messages within applications. It's recently been featured in news outlets around the world due to a vulnerability (known as Log4Shell) that was discovered allowing remote code execution using a specific string.
Mon, December 13
The Online PHP Conference 2022
The Online PHP Conference 2022 takes place January 17-21, 2022. This time we interpret the term "conference" literally: over the course of a week, we dedicate each morning to a topic that we will discuss together with invited experts in an interactive discussion. The topics are Remote Teams, Data Privacy and Data Security, Supply Chain Management, Cloud and Operations, and Green IT. The discussions will be held in German. https://2022.phpconference.online/
Fri, November 26
PHP 8.1.0 Released!
The PHP development team announces the immediate availability of PHP 8.1.0. This release marks the latest minor release of the PHP language. PHP 8.1 comes with numerous improvements and new features such as: Enumerations Readonly properties Fibers Pure Intersection Types return type never First-class Callable Syntax "final" modifier for class constants New and functions fsync fdatasync New function array_is_list Explicit Octal numeral notation And much much more... Take a look at the for more information. PHP 8.1 Announcement Addendum For source downloads of PHP 8.1.0 please visit our , Windo…
Wed, November 24
Laravel ecosystem — including Laravel, Forge, and Vapor — is PHP 8.1 ready
As you may have noticed in the past few weeks, we ensured that Laravel, first-party libraries, Forge, Envoyer, Nova, and Vapor, do support PHP 8.1 since day one. So, let's take a look at what you need to start using PHP 8.1.
Tue, November 23
PHP Foundation Announced
has been as an entity for funding the work of developing the PHP language. The PHP Foundation announced For more information regarding the structure and purpose of the foundation, please check out the blog post at: . jetbrains.com
Fri, November 19
PHP 8.0.13 Released!
The PHP development team announces the immediate availability of PHP 8.0.13. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.13 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, November 18
PHP 7.3.33 Released!
The PHP development team announces the immediate availability of PHP 7.3.33. This is a security release. All PHP 7.3 users are encouraged to upgrade to this version. For source downloads of PHP 7.3.33 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 7.4.26 Released!
The PHP development team announces the immediate availability of PHP 7.4.26. This is a security release. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.26 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Fri, November 12
International PHP Conference Berlin 2022
The is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. International PHP Conference All delegates of the International PHP Conference have, in addition to PHP program, free access to the entire range of the taking place at the same time. webinale Basic facts: Da…
PHP 8.1.0 RC 6 available for testing
The PHP team is pleased to announce the release of PHP 8.1.0, RC 6. This is the sixth and final release candidate, continuing the PHP 8.1 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.1.0, RC 6 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files c…
Mon, November 1
Forge: MariaDB 10.6 and PostgreSQL 14
We're happy to announce the immediate availability of MariaDB 10.6 and PostgreSQL 14 database versions on Laravel Forge.
Fri, October 29
PHP 8.1.0 RC 5 available for testing
The PHP team is pleased to announce the release of PHP 8.1.0, RC 5. This is the fifth release candidate, continuing the PHP 8.1 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.1.0, RC 5 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Thu, October 28
PHP 7.3.32 Released!
The PHP development team announces the immediate availability of PHP 7.3.32. This is a security release. All PHP 7.3 FPM users are encouraged to upgrade to this version. For source downloads of PHP 7.3.32 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, October 26
PHP workshop for 2 days with Shopware, Sylius, PHPUnit and Codeception in Duisburg
We will do live coding workshop for 2 days with core developers in Duisburg. Together with the wireless keyboard we will learn about Symfony entities in Shopware plugin, PHPUnit integration tests, headless API in Sylius and Codeception testing. See the for more details. event page
Mon, October 25
Vapor: RDS Proxies Now Support MySQL 8.0
Starting today, you may use Vapor's managed RDS Proxies with MySQL 8.0 — the most recent MySQL version.
Fri, October 22
PHP 7.4.25 Released!
The PHP development team announces the immediate availability of PHP 7.4.25. This is a security release. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.25 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, October 21
PHP 8.0.12 Released!
The PHP development team announces the immediate availability of PHP 8.0.12. This is a security fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.12 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, October 19
Vapor: PHP 8.1 Release Candidate Is Now Supported
Starting today, you may use PHP 8.1 Release Candidates in your Vapor environments. To get started, simply specify "php-8.1:al2" as your preferred runtime in your "vapor.yml" configuration file.
Fri, October 15
PHP 8.1.0 RC 4 available for testing
The PHP team is pleased to announce the release of PHP 8.1.0, RC 4. This is the fourth release candidate, continuing the PHP 8.1 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.1.0, RC 4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…
Mon, October 11
Forge: PHP 8.1 Release Candidate Is Now Supported
Starting today, you may install PHP 8.1 Release Candidates by choosing "PHP 8.1 RC" while creating a new server. Or, you may install the release candidate on an existing server via the PHP tab on a server's management dashboard.
Mon, October 4
Vapor: Octane Support Is Now Available
Today we're pleased to announce that Octane support is now available in Laravel Vapor. The speed improvements are just mind-blowing, so put on your seat belt, and let's get into the details.
Fri, October 1
PHP 8.1.0 RC 3 available for testing
The PHP team is pleased to announce the release of PHP 8.1.0, RC 3. This is the third release candidate, continuing the PHP 8.1 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.1.0, RC 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Tue, September 28
Forge: Let's Encrypt Compatibility Changes
On Thursday, September 30th there will be a small change in how older browsers and devices will treat Let's Encrypt's certificates. While most sites will be unaffected, it will likely impact you if you're providing an API or support IoT devices.
Fri, September 24
PHP 7.4.24 Released!
The PHP development team announces the immediate availability of PHP 7.4.24. This is a security release. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.24 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, September 23
PHP 8.0.11 Released!
The PHP development team announces the immediate availability of PHP 8.0.11. This is a security release fixing CVE-2021-21706. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.11 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 7.3.31 Released!
The PHP development team announces the immediate availability of PHP 7.3.31. This is a security release fixing CVE-2021-21706.. All PHP 7.3 users are encouraged to upgrade to this version. For source downloads of PHP 7.3.31 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Fri, September 17
PHP 8.1.0 RC 2 available for testing
The PHP team is pleased to announce the release of PHP 8.1.0, RC 2. This is the second release candidate, continuing the PHP 8.1 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.1.0, RC 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…
Fri, September 10
PHP Russia 2022
PHP Russia is the only Russian conference focused on PHP. It will be held in Moscow November 24-25, 2022. Main topics are PHP ecosystem (PHP itself, standards, frameworks, libraries and OpenSource) and major players experience in building complex projects using best practices and modern approaches. We expect 600+ attendees and 20+ speakers! Our audience consists of applications developers, API developers, CTO’s, CEO’s, fullstack developers, etc. The program is designed by the developer community, representatives of large companies from Runet and around the world, and by tech developers and co…
Thu, September 9
Longhorn PHP 2021
Longhorn PHP is returning for its third year! The conference will be held October 14-16, 2021, in Austin, Texas. Longhorn PHP exists to help PHP developers level up their craft and connect with the larger PHP community. Check out our , and get your tickets by September 17th to take advantage of early bird pricing! full schedule now
Wed, September 8
Envoyer: Transfer Projects
Starting today, it's possible for project owners to transfer projects to another Envoyer account. Collaborators will not be able to transfer a project away from its owner. Project transfers may be in...
Fri, September 3
PHP 8.1.0 RC 1 available for testing
The PHP team is pleased to announce the release of PHP 8.1.0, RC 1. This is the first release candidate, continuing the PHP 8.1 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.1.0, RC 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…