VulnPulse

Vulnerabilities & updates

Page 34

Wed, October 16

Tue, October 15

Thu, October 10

  • PHP 8.4.0 RC2 available for testing

    The PHP team is pleased to announce the release of PHP 8.4.0, RC2. This is the second release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…

Wed, October 9

  • Announcing Deno 2

    Our next major version of Deno combines the simplicity, security, and performance of Deno 1 with full Node and npm backwards compatibility, and much more.

  • GitLab Critical Patch Release: 17.4.2, 17.3.5, 17.2.9

    On October 9, 2024, we released versions 17.4.2, 17.3.5, 17.2.9 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases, and ad-hoc critical patches for high-severity vulnerabilities. Schedul…

Tue, October 8

  • Bun v1.1.30

    Fixes 57 bugs (addressing 150 👍) Bun's CSS bundler is here (and very experimental). `bun publish` is a drop-in replacement for `npm publish`. `bun build --bytecode` compiles to bytecode leading to 2x faster start time. Bun.color() formats and normalizes colors. `bun pm whoami` prints your npm username. bun install reads $HOME/.npmrc. bun build --format=cjs outputs CommonJS modules. bun build --target=node now supports Node.js native addons. 30x faster crypto.privateEncrypt() & crypto.publicDecrypt(). Zombie process killer in bun test. --banner and --footer options in bun build. Bun.serve().s…

  • Taylor’s Morning Routine & Laravel’s Open Source Pledge

    I start every morning by opening up a GitHub search that shows me [all the open pull requests](https://github.com/search?q=org%3Alaravel+is%3Apr+is%3Aopen) across Laravel's open source ecosystem. It’s...

Fri, October 4

Thu, October 3

  • Unbound 1.21.1 released

    We are pleased to announce the release of version 1.21.1 of the Unbound recursive DNS resolver. This security release fixes CVE-2024-8508. A vulnerability has been discovered in Unbound when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstreams responses with very …

Mon, September 30

Fri, September 27

  • PHP 8.1.30 Released!

    The PHP development team announces the immediate availability of PHP 8.1.30. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.30 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

  • PHP 8.4.0 RC 1 now available for testing

    The PHP team is pleased to announce the release of PHP 8.4.0, RC 1. This is the first release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…

  • PHP 8.2.24 Released!

    The PHP development team announces the immediate availability of PHP 8.2.24. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.24 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Thu, September 26

  • PHP 8.3.12 Released!

    The PHP development team announces the immediate availability of PHP 8.3.12. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.12 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Wed, September 25

  • GitLab Patch Release: 17.4.1, 17.3.4, 17.2.8

    On September 25, 2024, we released versions 17.4.1, 17.3.4, 17.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases, and ad-hoc critical patches for high-severity vulnerabilities. Sche…

  • GitLab Critical Patch Release: 16.10.10, 16.9.11, 16.8.10, 16.7.10, 16.6.10, 16.5.10, 16.4.7, 16.3.9, 16.2.11, 16.1.8, 16.0.10

    On September 25, 2024, we released versions 16.10.10, 16.9.11, 16.8.10, 16.7.10, 16.6.10, 16.5.10, 16.4.7, 16.3.9, 16.2.11, 16.1.8, and 16.0.10 for GitLab Community Edition (CE) and Enterprise Edition (EE). This extends the security fixes previously added to 17.3.3, 17.2.7, 17.1.8, 17.0.8, 16.11.10. These versions contain backports of an important security fix which was previously released for GitLab versions 17.3.3, 17.2.7, 17.1.8, 17.0.8, and 16.11.10 . We strongly recommend that all affected self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is a…

Tue, September 24

Fri, September 20

  • Bun v1.1.29

    Fixes 21 bugs (addressing 22 👍). Fixes issue with proxying requests with axios. N-API (napi) support in compiled C. Faster typed arrays in `bun:ffi` with 'buffer' type. Fixes issue with bundling imported .wasm files in `bun build`. Fixes regression with `bun build` from v1.1.28. Fixes snapshot regression in `bun test`. Fixes bug with argument validation in `Bun.build` plugins.

Thu, September 19

Wed, September 18

Tue, September 17

  • Dutch PHP Conference 2025 - Call For Papers

    🚀 Dutch PHP Conference 2025 is coming! 🚀 We’re thrilled to announce that the 19th edition of the Dutch PHP Conference will take place from March 18 to March 21, 2025 in Amsterdam! 🗓️ 🎤 Call for Papers is now OPEN! 🎤 Got insights, skills, or experience to share? Submit your talk ideas before the deadline on December 17th! We’re looking for both technical and non-technical sessions that will inspire and engage our community. Highlights: 👥 Expected attendance: around 800 📅 Conference dates: March 18 – 21, 2025 🎙️ 30-40 speaking slots available 🎟️ Early Bird Tickets Available Now! 🎟️ Do…

  • GitLab Critical Patch Release: 17.3.3, 17.2.7, 17.1.8, 17.0.8, 16.11.10

    On September 17, 2024, we released versions 17.3.3, 17.2.7, 17.1.8, 17.0.8, 16.11.10 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. All GitLab Dedicated instances have been upgraded and customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases, and ad-hoc c…

Fri, September 13

  • Herd 1.11 Now Available

    We're thrilled to announce the next big step for Laravel Herd, making the best development environment for macOS and Windows users even better. This update ships an integration with Laravel Forge, a profiler, a way to store your project configuration in your repository, and massive improvements for the dump debugger.

Thu, September 12

  • PHP 8.4.0 Beta 5 available for testing

    The PHP team is pleased to announce the release of PHP 8.4.0, Beta 5. This is the third beta release, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, Beta 5 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…

Wed, September 11

  • GitLab Patch Release: 16.11.9

    On September 11, 2024, we released versions 16.11.9 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 16.11.9 repository: Add empty vote in ApplyGitattributes CI: Add test basic package functionality before release (16.11 Backport) Use latest builder images for check-packages pipeline (16.11 Backport) Private dotenv artifacts not accessible to downstream jobs Important notes on upgrading This version does not include any new migrat…

  • GitLab Critical Patch Release: 17.3.2, 17.2.5, 17.1.7

    On September 11, 2024, we released versions 17.3.2, 17.2.5, 17.1.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases, and ad-hoc critical patches for high-severity vulnerabilities. Sche…

Tue, September 10

Sat, September 7

  • Bun v1.1.27

    Fixes 130 bugs (addressing 250 👍). `bun pm pack`, faster `node:zlib`. Static routes in Bun.serve(). ReadableStream support in response.clone() & request.clone(). Per-request timeouts. Cancel method in ReadableStream is called. `bun run` handles CTRL + C better. Faster buffered streams. `bun outdated` package filtering. Watch arbtirary file types in --hot and --watch. Fixes to proxies on Windows. Several Node.js compatibility improvements.

Thu, September 5

Tue, September 3

Sun, September 1

  • Announcing Vue 3.5

    Today we are excited to announce the release of Vue 3.5 "Tengen Toppa Gurren Lagann"! This minor release contains no breaking changes and includes both internal improvements and useful new features. We will cover some highlights in this blog post - for a full list of changes and new features, please consult the full changelog on GitHub .

Fri, August 30

  • PHP 8.3.11 Released!

    The PHP development team announces the immediate availability of PHP 8.3.11. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.11 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

  • PHP 8.4.0 Beta 4 now available for testing

    The PHP team is pleased to announce the release of PHP 8.4.0, Beta 4. This is the second beta release, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, Beta 4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…

  • PHP 8.2.23 Released!

    The PHP development team announces the immediate availability of PHP 8.2.23. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Wed, August 28

  • Typing lists and tuples in Elixir

    This article explores the design decisions of typing lists and tuples in Elixir within a sound gradual type system.

  • API Platform Conference 2024

    is an open-source PHP framework, designed to build modern, fast, and robust APIs thanks to its wide set of tools and features. It supports many formats and protocols, including JSON-LD, OpenAPI, and GraphQL, and is designed to streamline the developer experience. API Platform , the event dedicated to the API Platform framework and its ecosystem, is back and will be held in Lille, France, at EuraTechnologies (Europe's largest startup incubator and accelerator). The API Platform Conference On September 19th and 20th, 25 talks will be delivered, in English and in French. Also, many organizations…

Tue, August 27

Sat, August 24

  • Bun v1.1.26

    Fixes 9 bugs (addressing 652 👍). `bun outdated` shows outdated dependencies. Bun.serve() gets a new `idleTimeout` option and `subscriberCount(topic: string)` for a count of websocket clients subscribed to a topic. `test.only` in bun:test now skips tests before and after instead of only after. expect.assertions(n) in async functionn is fixed. "use strict" in CommonJS modules is now preserved. Plus, more node.js compatibility improvements and bug fixes.

Thu, August 22

Wed, August 21

  • Bun v1.1.25

    Fixes 42 bugs (addressing 470 👍). Support for `node:cluster` and V8's C++ API. Faster WebAssembly on Windows with OMGJIT. 5x faster S3 uploads with @aws-sdk/client-s3, Worker in standalone executables, and more Node.js compatibility improvements and bug fixes.

  • GitLab Patch Release: 17.3.1, 17.2.4, 17.1.6

    On August 21, 2024, we released versions 17.3.1, 17.2.4, 17.1.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases fixes for vulnerabilities in dedicated patch releases. There are two types of patch releases: scheduled releases, and ad-hoc critical patches for high-severity vulnerabilities. Scheduled releases are released twice a month on the second and f…

Fri, August 16

  • PHP Russia 2024

    PHP Russia is the only Russian conference focused on PHP. It will be held in Moscow December 2-3, 2024. Main topics are PHP ecosystem (PHP itself, standards, frameworks, libraries and OpenSource) and major players experience in building complex projects using best practices and modern approaches. We expect 600+ attendees and 20+ speakers! Our audience consists of applications developers, API developers, CTO’s, CEO’s, fullstack developers, etc. The program is designed by the developer community, representatives of large companies from Runet and around the world, and by tech developers and comm…

  • ConFoo Montreal 2025: Call for Papers

    ConFoo is a multi-technology conference specifically crafted for developers. With over 150 presentations, offered by local and international speakers, this conference wish to bring outstanding diversity of content to expand developers knowledge, increase productivity and boost skills. Want to share your knowledge and expertise to hundreds of experts in your field? Want to be part of our talented team of renowned speakers? Want to demonstrate how human intelligence is changing our field of work? The team at ConFoo is looking for speakers and talk proposals for its 2025 event in Montreal. From…