취약점·업데이트
12페이지
11월 3일 (목)
PHP 7.4.33 Released!
The PHP development team announces the immediate availability of PHP 7.4.33. This is security release that fixes an OOB read due to insufficient input validation in imageloadfont(), and a buffer overflow in hash_update() on long parameter. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.33 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
10월 28일 (금)
PHP 8.1.12 Released!
The PHP development team announces the immediate availability of PHP 8.1.12. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.12 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.0.25 Released!
The PHP development team announces the immediate availability of PHP 8.0.25. This is a security fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.25 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.0 RC5 available for testing
The PHP team is pleased to announce the fifth release candidate of PHP 8.2.0, RC 5. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 RC5 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
Forge: Dark Mode
Dark mode is a must-have feature for many developers and anyone who uses it often knows just how jarring it is when you're thrown into an application or website that doesn't support it.
10월 20일 (목)
Vapor: Introducing Custom Asset Domains
In the latest release of Vapor, we've made it possible for you to serve your assets via a custom domain.
php[tek] 2023 - Chicago, IL
Join us for the 15th Annual Web Developer Conference, php[tek] 2023, May 16-18 2023. We are so excited to be bringing back php[tek] in 2023 and will be returning to the Sheraton O’Hare Hotel which is conveniently located by Chicago O'Hare Airport. php[tek] 2023 combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professionally while also providing you with the knowledge to solve your everyday problems. We are the longest-running web developer conference in the United States, focusing on the PHP programming…
php[tek] 2023 - Call for Papers
We are excited to be bringing back php[tek] in 2023 and will be returning to the Sheraton O’Hare Hotel which is conveniently located by Chicago O'Hare Airport. Whether you are a seasoned speaker or this will be your first time speaking at a conference, this is the conference you want to submit your talk to. Our panel of professional speakers will review your abstract and give pointers to help improve your chances of being selected. php[tek] 2023 combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professio…
10월 17일 (월)
Vapor: PHP 8.2 Release Candidate Is Now Supported
Starting today, you may use PHP 8.2 Release Candidates in your Vapor environments. To get started, simply specify "php-8.2:al2" as your preferred runtime in your "vapor.yml" configuration file.
10월 13일 (목)
PHP 8.2.0 RC 4 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 4. This is the fourth release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…
10월 11일 (화)
Laravel: New Environment Encryption Commands
Laravel v9.32.0 saw the release of two new Artisan commands; `env:encrypt` and `env:decrypt`.
9월 30일 (금)
PHP 8.0.24 Released!
The PHP development team announces the immediate availability of PHP 8.0.24. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.24 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.0 RC3 available for testing
The PHP team is pleased to announce the third release candidate of PHP 8.2.0, RC 3. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 RC3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
PHP 8.1.11 Released!
The PHP development team announces the immediate availability of PHP 8.1.11. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.11 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
9월 29일 (목)
PHP 7.4.32 Released!
The PHP development team announces the immediate availability of PHP 7.4.32. This is a security release. This release addresses an infinite recursion with specially constructed phar files, and prevents a clash with variable name mangling for the __Host/__Secure HTTP headers. All PHP 7.4 users are encouraged to upgrade to this version. For source downloads of PHP 7.4.32 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2022-016
Project: Drupal core Project machine name: drupal Date: 2022-September-28 Security risk: Critical 18 ∕ 25 AC:Basic/A:Admin/CI:All/II:All/E:Proof/TD:All Vulnerability: Multiple vulnerabilities Affected versions: >= 8.0.0 <9.3.22 || >= 9.4.0 <9.4.7 CVE IDs: CVE-2022-39261 Description: Drupal uses the Twig third-party library for content templating and sanitization. Twig has released a security update that affects Drupal. Twig has rated the vulnerability as high severity. Drupal core's code extending Twig has also been updated to mitigate a related vulnerability. Multiple vulnerabilities are pos…
9월 23일 (금)
Vapor: Managing DNS
In this post, we'll discuss the different approaches to managing your DNS when attaching a custom domain to your Vapor project.
Nova: New Features You May Have Missed
Let's take a moment to highlight some great new features you may have missed in Nova version 4.
9월 15일 (목)
PHP 8.2.0 RC2 available for testing
The PHP team is pleased to announce the release of PHP 8.2.0, RC 2. This is the second release candidate, continuing the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0, RC 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…
Vapor: Free Sandbox Accounts
Introduding Vapor sandbox accounts. Get started with Vapor for free and see how quick, easy and painless it is to provision, deploy and manage your Laravel application in a serverless environment.
9월 1일 (목)
PHP 8.2.0 RC1 available for testing
The PHP team is pleased to announce the first release candidate of PHP 8.2.0, RC 1. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 RC1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
PHP 8.0.23 Released!
The PHP development team announces the immediate availability of PHP 8.0.23. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Longhorn PHP 2022
Longhorn PHP returns for the fourth year, from November 3-5 2022, in Austin Texas. The three day conference features tutorials and talks across three tracks. The is live - grab your tickets before October 3rd to get Early Bird pricing! full schedule
PHP 8.1.10 Released!
The PHP development team announces the immediate availability of PHP 8.1.10. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.10 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
8월 30일 (화)
Ditching Google Analytics for Fathom
On August 24th, we switched to Fathom Analytics, completely removing our dependency on Google Analytics from this blog, Envoyer, Forge and Vapor.
8월 18일 (목)
PHP 8.2.0 Beta 3 available for testing
The PHP team is pleased to announce the third beta release of PHP 8.2.0, Beta 3. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 Beta 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
8월 16일 (화)
Forge: New IP Addresses
On September 10th, Forge will begin to utilize three additional IP addresses. If you are utilizing an IP allow list.
8월 9일 (화)
Laravel: New DB Commands
Following last week's release, which again focused on Artisan, this week Laravel v9.24 introduces three new DB commands and more.
8월 4일 (목)
PHP 8.1.9 Released!
The PHP development team announces the immediate availability of PHP 8.1.9. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.9 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.0 Beta 2 available for testing
The PHP team is pleased to announce the second beta release of PHP 8.2.0, Beta 2. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 Beta 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rel…
PHP 8.0.22 Released!
The PHP development team announces the immediate availability of PHP 8.0.22. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.22 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
7월 23일 (토)
Vapor: Postgres Improvements
In the latest release of Vapor, we’ve made some big improvements to our support for Postgres.
7월 22일 (금)
Customer Balances for Spark Stripe
In the latest release of Spark Stripe, we're happy to introduce support for Customer Balances. With this new addition, customers will be able to view their current balance and top up their balance: !...
7월 21일 (목)
PHP 8.2.0 Beta 1 available for testing
The PHP team is pleased to announce the first beta release of PHP 8.2.0, Beta 1. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 Beta 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. Because of a bug found in early testing of this release, this version is NOT usable with ZTS builds. For more information on the new features and other changes, you can read th…
Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2022-015
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Moderately critical 11 ∕ 25 AC:Complex/A:User/CI:Some/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Multiple vulnerabilities Affected versions: >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25276 Description: The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities. This advisory is not cove…
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Critical 15 ∕ 25 AC:Basic/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Arbitrary PHP code execution Affected versions: >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25277 Description: Updated 2022-07-20 19:45 UTC to indicate that this only affects Apache web servers. Drupal core sanitizes filenames with dangerous extensions upon upload (reference: SA-CORE-2020-012 ) and strips leading and trailing dots from filenames to prevent uploading server configuration files (reference: SA-CORE-…
Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Moderately critical 12 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Access Bypass Affected versions: >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25278 Description: Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules or themes…
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Moderately critical 13 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information Disclosure Affected versions: >=7.0 <7.91 || >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25275 Description: In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file syst…
7월 19일 (화)
Laravel: New "about" Command
Following on from the recently introduced fresh new look for Artisan, we took some time to identify new Artisan commands to further improve the Laravel experience. Another newly introduced command is "about". This command displays information about your application's environment.
Laravel: New "model:show" Command
Following on from the recently introduced fresh new look for Artisan, we took some time to identify new Artisan commands to further improve the Laravel experience. One of the newly introduced commands is "model:show". This command dumps out the model and table highlights for the given model.
Laravel: Refreshing Artisan
On today's release of Laravel v9.21.0, we’re bringing you a fresh new look for Artisan: a brand new console output on the vast majority of Laravel commands that deliveries a better console experience, and displays more information in commands such as "migrate" or "queue:work".
7월 15일 (금)
Laravel Pint v1.0 Released
After a few beta releases, today we've finally reached the first stable release of Pint. And, starting with next week's release of Laravel, Pint will be included on every new Laravel application as a `dev` dependency.
7월 14일 (목)
Longhorn PHP 2022 - CFP Open
Howdy, y'all! 🤠 is returning for its 4th year in Austin, TX! We are a community-run conference for PHP developers in Texas and beyond. We are excited to bring PHP developers from all backgrounds together again for 3 days of fun and education. Longhorn PHP We are currently . Talk ideas will be accepted until August 11, 2022. accepting submissions for 50 minute talks and 3 hour tutorials While the , we also have our Blind Bird tickets available for sale. CFP is open Register now! Follow us on , or signup for emails at to get notified with important conference updates. Twitter longhornphp.com
7월 8일 (금)
PHP 8.1.8 Released!
The PHP development team announces the immediate availability of PHP 8.1.8. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.8 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
7월 7일 (목)
PHP 8.2.0 Alpha 3 available for testing
The PHP team is pleased to announce the third testing release of PHP 8.2.0, Alpha 3. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 Alpha 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the…
PHP 8.0.21 Released!
The PHP development team announces the immediate availability of PHP 8.0.21. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.21 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
7월 6일 (수)
International PHP Conference Munich 2022
The is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. International PHP Conference All delegates of the International PHP Conference have, in addition to PHP program, free access to the entire range of the taking place at the same time. International JavaScript…
7월 2일 (토)
SymfonyWorld Online 2022 Winter Edition
is the global Symfony conference in English for PHP developers from all around the World. Two days of online workshops (December 6-7) followed by two days (December 8-9) full of online talks on PHP, Symfony and its ecosystem. SymfonyWorld Online 2022 Winter Edition Check out all the conference details
7월 1일 (금)
SymfonyCon Disneyland Paris 2022
is the global Symfony conference in English for PHP developers from all around the World. Two days of workshops (November 15-16) followed by two days (November 17-18) full of talks on PHP, Symfony and its ecosystem. SymfonyCon Disneyland Paris 2022 Each ticket includes an invitation for two people to the exclusive party (20:00 - 23:30, November 17) where conference attendees will enjoy Walt Disney Studios Park open exclusively for them. Enjoy this special moment with your family or friends. We've also negotiated a discounted rate in one of the Disney's hotels. Check out all the conference det…
6월 25일 (토)
Super-charging Laravel Forge Deployments with Environment Variables
Aside from provisioning servers and creating sites, Laravel Forge does so much more, including deploying code to your sites.