Vulnerabilities & updates
Page 11
Thu, June 8
International PHP Conference Munich 2023
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: October 23 ‒ 27, 2023 Location: Holiday Inn Munich City Centre, Munich or Online Highlights: 70+ best practice sessions 50+ international top speakers PHPower:…
PHP 8.0.29 Released!
The PHP development team announces the immediate availability of PHP 8.0.29. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.29 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Wed, June 7
Vapor: Native Runtime Deprecations
Today, we’re announcing the deprecation of a number of our native runtimes and wanted to take the opportunity to communicate what this looks like both now and moving forward.
Sun, June 4
Longhorn PHP 2023 - Call for Papers
Longhorn PHP is returning for 2023! Held in Austin, TX, the conference runs from Nov 2 - Nov 4, with a tutorial day on Thursday, followed by two main conference days. We are a community-run conference for PHP developers in Texas and beyond. We are excited to bring PHP developers from all backgrounds together again for three days of fun and education. We are currently accepting talk and tutorial submissions. While the CFP is open, we also have our Blind Bird tickets available for sale. . Follow us on , , or signup for emails at to get notified with important conference updates. Register today!…
Tue, May 23
Dutch PHP Conference 2023 - Call for Papers
We are back for the of the ! We hope you will join us on for the . 🐘🎉 17th edition Dutch PHP Conference October 13, 2023 online conference We’re also looking for high-quality, technical and non-technical sessions from speakers who can cover advanced topics and keep our audience inspired. We’ve had great speakers presenting talks about the PHP ecosystem, frameworks, DevOps, architecture, JavaScript, scaling, testing, performance, security and more. And we would like to advance on these very topics for this year’s conference as well. But we also would like to invite speakers to talk about non…
Fri, May 12
PHP 8.1.19 Released!
The PHP development team announces the immediate availability of PHP 8.1.19. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.19 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, May 11
Vapor: Farewell to Debug Logs
When Vapor handles incoming HTTP requests or queued jobs, it writes debug information to your CloudWatch logs. This includes logging when your application's configuration is cached, environment variab...
PHP 8.2.6 Released!
The PHP development team announces the immediate availability of PHP 8.2.6. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.6 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, May 2
Forge: Deployment Webhook Improvements
Laravel Forge's "quick deploy" feature gives your team a seamless push-to-deploy experience. Whenever new code is pushed to your deployed branch, Forge will kick off a new deployment. This ensures tha...
Thu, April 20
Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
Project: Drupal core Project machine name: drupal Date: 2023-April-19 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All Vulnerability: Access bypass Affected versions: <7.96.0 || >=9.4.0 <9.4.14 || >=9.5.0 <9.5.8 || >=10.0.0 <10.0.8 || 8.0.* || 8.1.* || 8.2.* || 8.3.* || 8.4.* || 8.5.* || 8.6.* || 8.7.* || 8.8.* || 8.9.* || 9.0.* || 9.1.* || 9.2.* || 9.3.* CVE IDs: CVE-2023-31250 Description: The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they…
Mon, April 17
Vapor: Arm Architecture Support
Today we're super pumped to announce Arm powered runtimes on Vapor. Powered by AWS Graviton 2 processors, applications will see up to 20% better performance at a 20% cost reduction.
Fri, April 14
PHP 8.1.18 Released!
The PHP development team announces the immediate availability of PHP 8.1.18. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.18 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.5 Released!
The PHP development team announces the immediate availability of PHP 8.2.5. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.5 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, April 4
Vapor: Queue Management
Today, we're excited to announce that we're bringing queue management to the Vapor dashboard!
Fri, March 24
Vapor: Application Logs Reloaded
Today, we're excited to announce that by combining the power of CloudWatch with the sleek and intuitive Vapor UI, we're making application logs available directly in the Vapor dashboard.
Tue, March 21
Web Summer Camp 2023
Web Summer Camp is a conference with hands-on workshops for web developers, designers and decision-makers. Besides 2 tracks about UX/PM processes and web technologies there will be 3 tracks for non-beginner developers with hands-on workshops on topics related to JavaScript, PHP and Symfony. Take home practical knowhow on relevant tools and techniques useful in your every day work and join us in person this summer on the Croatian coast. All the information on this year's event you can find on our web site
Thu, March 16
PHP 8.2.4 Released!
The PHP development team announces the immediate availability of PHP 8.2.4. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.17 Released!
The PHP development team announces the immediate availability of PHP 8.1.17. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Access bypass Affected versions: <7.95 || >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: Drupal core provides a page that outputs the markup from phpinfo() to assist with diagnosing PHP configuration. If an attacker was able to achieve an XSS exploit against a privileged user, they may be able to use the phpinfo page to access sensitive information that could be used to escalate the attack…
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-003
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 13 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: The language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages. The URL of unpublished translations may be disclosed. When used in conjunction with a module like Pathauto, this may reveal the title of unpublished content. This adv…
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-002
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 14 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: The Media module does not properly check entity access in some circumstances. This may result in users seeing thumbnails of media items they do not have access to, including for private files. This release was coordinated with SA-CONTRIB-2023-010 . This advisory is not covered by Drupal Steward . Solution…
Wed, February 15
PHP 8.1.16 Released!
The PHP development team announces the immediate availability of PHP 8.1.16. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.1 users are advised to upgrade to this version. For source downloads of PHP 8.1.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.3 Released!
The PHP development team announces the immediate availability of PHP 8.2.3. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.2 users are advised to upgrade to this version. For source downloads of PHP 8.2.3 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, February 14
PHP 8.0.28 Released!
The PHP development team announces the immediate availability of PHP 8.0.28. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.0 users are advised to upgrade to this version. For source downloads of PHP 8.0.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Laravel 10 Released
Today we're thrilled to announce that we have tagged the Laravel 10.0 release! Laravel 10 continues the improvements made in Laravel 9 by introducing argument and return types to all application skel...
Tue, February 7
SymfonyCon Brussels 2023
is the global conference in English for Symfony and PHP developers. Two days of workshops (December 5-6) followed by two days (December 7-8) full of talks on PHP, Symfony and its ecosystem. SymfonyCon Brussels 2023 Join us and discover the amazing city of Brussels (Belgium) while you share fun and knowledge with developers from all around the World. Check out all the conference details
SymfonyOnline June 2023
is the online conference in English for Symfony and PHP developers from all around the World. Two days of online workshops (June 13-14) followed by two days (June 15-16) full of online talks on PHP, Symfony and its ecosystem. SymfonyOnline June 2023 Check out all the conference details
SymfonyLive Paris 2023
is the Symfony conference for French-speaking developers. Two days of workshops (March 21-22) followed by two days (March 23-24) full of talks on PHP, Symfony and its ecosystem. SymfonyLive Paris 2023 Check out all the conference details
Fri, February 3
PHP 8.1.15 Released!
The PHP development team announces the immediate availability of PHP 8.1.15. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, February 2
PHP 8.2.2 Released!
The PHP development team announces the immediate availability of PHP 8.2.2. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.2 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Mon, January 30
Vapor: Individual Queue Concurrency
Today, we're excited to announce it's now possible to set the maximum concurrency of individual Vapor queues. This new feature will allow you to ensure that not one of your queues can consume all of the available resources.
Thu, January 19
Vapor: Asia Pacific (Jakarta) Region Is Now Available
Starting today, you may also choose the Asia Pacific (Jakarta) region when starting a new project on Vapor. This new region offers low latency for customers seeking to serve end-users in Indonesia.
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-001
Project: Drupal core Project machine name: drupal Date: 2023-January-18 Security risk: Moderately critical 12 ∕ 25 AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.10 || >=9.5.0 <9.5.2 || >=10.0.0 <10.0.2 Description: The Media Library module does not properly check entity access in some circumstances. This may result in users with access to edit content seeing metadata about media items they are not authorized to access. The vulnerability is mitigated by the fact that the inaccessible media will only be visible to u…
Vapor: Introducing Custom IP Ranges
One of the most requested features for Vapor is the ability to create a network with a custom IP range. Many customers ask to do this in order to configure Vapor environments to communicate with pre-...
Tue, January 10
Spark 3.0 Now Available!
Today we're happy to announce that Spark 3.0 is available! Spark Stripe 3.0 includes support for Cashier Stripe 14, offering the latest compatibility enhancements with Stripe. Check out our upgrade guide to update your Spark installation to this new major version.
Mon, January 9
Laravel 10 Bug Hunt
In February, we will launch the 10th major version of Laravel! It's been an amazing journey thus far and there is so much more to come. As you may know, we rely on our community to help us test new m...
Fri, January 6
PHP 8.0.27 Released!
The PHP development team announces the immediate availability of PHP 8.0.27. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.27 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.1 Released!
The PHP development team announces the immediate availability of PHP 8.2.1. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.1 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.14 Released!
The PHP development team announces the immediate availability of PHP 8.1.14. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.14 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, December 20
Laravel Loves PHP 8.2
Last week saw the official release of PHP 8.2, bringing with it features such as read-only classes, DNF types, and much more. As you may have noticed, we've been busy preparing the Laravel framework,...
Sat, December 17
phpday 2023
Join us for the of ! On you can attend the in-person event in or online. 20th edition phpday May 18-19 2023 Verona (Italy) Organized by (the Italian PHP user group), phpday is one of the first historic European conferences dedicated to PHP, development tools and best practices. We are a community whose intent is to improve the web development ecosystem in Italy and to organize affordable, high-quality events and workshops for developers. GrUSP We are committed to , and values: we apply a and we have a . diversity inclusion accessibility Code of Conduct Scholarship program Our will be and we'r…
Thu, December 8
PHP 8.2.0 Released!
The PHP development team announces the immediate availability of PHP 8.2.0. This release marks the latest minor release of the PHP language. PHP 8.2 comes with numerous improvements and new features such as: Readonly classes Disjunctive Normal Form (DNF) Types New stand-alone types: , and null, false true New "Random" extension Constants in traits Deprecate dynamic properties And much much more... For source downloads of PHP 8.2.0 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog The is…
Wed, December 7
International PHP Conference Berlin 2023
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference All delegates of the International PHP Conference have, in addition to PHP program, free access to the entire range of the taking place at the same time. webinale Basic facts: Da…
Tue, December 6
Forge: Circle Permissions
Circle owners can now control the level of access a circle member has to servers and sites through the use granular permission levels.
Tue, November 29
Vapor: Avoid Unexpected Charges With Managed Budgets
Starting today, you may use Vapor's managed budgets when creating or editing your cloud provider. Here, you can define your monthly AWS budget in USD and configure multiple alarms to notify the team owner via email if there is a spike in costs.
Sun, November 27
PHP 8.0.26 Released!
The PHP development team announces the immediate availability of PHP 8.0.26. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.26 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog Please note, this is the last bug-fix release for the 8.0.x series. Security fix support will continue until 26 Nov 2023. For more information, please check our page. Supported Versions
Fri, November 25
PHP 8.2.0 RC7 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 7. This is the seventh release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 7 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also…
Thu, November 24
PHP 8.1.13 Released!
The PHP development team announces the immediate availability of PHP 8.1.13. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.13 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, November 10
PHP 8.2.0 RC 6 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 6. This is the sixth release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 6 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Introducing Fresh WordPress Themes
Combine the DX and performance of Fresh with the reliability and dependability of WordPress.