Vulnerabilities & updates
Page 48
Fri, September 9
Next.js 12.3
Next.js 12.3 introduces TypeScript Auto-Install, improved Fast Refresh, stable new Image Component, and more!
Thu, September 8
Fresh 1.1 - automatic JSX, plugins, DevTools, and more
This release makes Fresh even more powerful with automatic JSX, plugins, DevTools integration and more.
Bun v0.1.11
Release notes for Bun v0.1.11
Thu, September 1
PHP 8.2.0 RC1 available for testing
The PHP team is pleased to announce the first release candidate of PHP 8.2.0, RC 1. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 RC1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
PHP 8.0.23 Released!
The PHP development team announces the immediate availability of PHP 8.0.23. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Longhorn PHP 2022
Longhorn PHP returns for the fourth year, from November 3-5 2022, in Austin Texas. The three day conference features tutorials and talks across three tracks. The is live - grab your tickets before October 3rd to get Early Bird pricing! full schedule
PHP 8.1.10 Released!
The PHP development team announces the immediate availability of PHP 8.1.10. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.10 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Elixir v1.14 released
Elixir v1.14 is out with a focus on debugging and developer experience.
Tue, August 30
Ditching Google Analytics for Fathom
On August 24th, we switched to Fathom Analytics, completely removing our dependency on Google Analytics from this blog, Envoyer, Forge and Vapor.
Thu, August 25
Deno 1.25 Release Notes
Deno 1.25 adds the `deno init` subcommand, experimental support for importing npm packages, a new faster web server, and performance improvements to the FFI.
Fri, August 19
Bun v0.1.10
Release notes for Bun v0.1.10
Thu, August 18
PHP 8.2.0 Beta 3 available for testing
The PHP team is pleased to announce the third beta release of PHP 8.2.0, Beta 3. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 Beta 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…
Bun v0.1.9
Release notes for Bun v0.1.9
Tue, August 16
Forge: New IP Addresses
On September 10th, Forge will begin to utilize three additional IP addresses. If you are utilizing an IP allow list.
Mon, August 15
Big Changes Ahead for Deno
Learnings from our recent survey and feedback from across our community. We'll discuss how we're addressing this feedback and the features to expect from Deno in the coming months.
ldns 1.8.3 quickfix release
Version 1.8.2 of ldns had a crash bug when creating packets with an EDNS OPT resource record without options. For example when just setting the DO bit (DNSSEC OK) or when specifying a larger UDP payload size. This quick fix release has this resolved. Also the unit tests have been reviewed and updated to catch this in the future before release. Compared to the 1.8.1 release, this release has some bugfixes and a few new features, most notably: Since draft-ietf-dnsop-svcb-https will become RFC now anytime soon, SVCB and HTTPS RR types are now compiled by default. Functionality for parsing and pr…
Fri, August 12
ldns 1.8.2 released
I am pleased to announce that version 1.8.2 of ldns is now available. Besides some bugfixes, this release also has a few new features, most notably: Since draft-ietf-dnsop-svcb-https will become RFC now anytime soon, SVCB and HTTPS RR types are now compiled by default. Functionality for parsing and printing of EDNS0 Options. The list of options in a packet can be accessed via a new function: ldns_pkt_edns_get_option_list(ldns_pkt *packet). The list can be further manipulated with functions as described in edns.h. Finally the options can be converted to presentation format with ldns_edns_optio…
Thu, August 11
Bun v0.1.8
Release notes for Bun v0.1.8
Tue, August 9
Laravel: New DB Commands
Following last week's release, which again focused on Artisan, this week Laravel v9.24 introduces three new DB commands and more.
Sat, August 6
Bun v0.1.7
Release notes for Bun v0.1.7
Thu, August 4
PHP 8.1.9 Released!
The PHP development team announces the immediate availability of PHP 8.1.9. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.9 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.0 Beta 2 available for testing
The PHP team is pleased to announce the second beta release of PHP 8.2.0, Beta 2. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 Beta 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rel…
PHP 8.0.22 Released!
The PHP development team announces the immediate availability of PHP 8.0.22. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.22 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, August 2
Bun v0.1.6
Release notes for Bun v0.1.6
Mon, August 1
Unbound 1.16.2 released
We are pleased to announce the release of version 1.16.2 of the Unbound recursive DNS resolver. This release fixes the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699. They were reported by Xiang Li from the Network and Information Security Lab of Tsinghua University. Other than that there are …
Fri, July 29
Roll your own JavaScript runtime
A walk-through of creating a CLI that executes JavaScript files.
Wed, July 27
Sat, July 23
Bun v0.1.5
Release notes for Bun v0.1.5
Vapor: Postgres Improvements
In the latest release of Vapor, we’ve made some big improvements to our support for Postgres.
Fri, July 22
Customer Balances for Spark Stripe
In the latest release of Spark Stripe, we're happy to introduce support for Customer Balances. With this new addition, customers will be able to view their current balance and top up their balance: !...
Deno 1.24 Release Notes
Deno 1.24 improves performance of transpiling and type-checking, adds unhandledrejection and beforeunload events, adds import.meta.resolve() API, and more
Thu, July 21
PHP 8.2.0 Beta 1 available for testing
The PHP team is pleased to announce the first beta release of PHP 8.2.0, Beta 1. This continues the PHP 8.2 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.2.0 Beta 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. Because of a bug found in early testing of this release, this version is NOT usable with ZTS builds. For more information on the new features and other changes, you can read th…
Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2022-015
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Moderately critical 11 ∕ 25 AC:Complex/A:User/CI:Some/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Multiple vulnerabilities Affected versions: >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25276 Description: The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities. This advisory is not cove…
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Critical 15 ∕ 25 AC:Basic/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Arbitrary PHP code execution Affected versions: >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25277 Description: Updated 2022-07-20 19:45 UTC to indicate that this only affects Apache web servers. Drupal core sanitizes filenames with dangerous extensions upon upload (reference: SA-CORE-2020-012 ) and strips leading and trailing dots from filenames to prevent uploading server configuration files (reference: SA-CORE-…
Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Moderately critical 12 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Access Bypass Affected versions: >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25278 Description: Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules or themes…
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Moderately critical 13 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information Disclosure Affected versions: >=7.0 <7.91 || >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25275 Description: In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file syst…
Tue, July 19
Laravel: New "about" Command
Following on from the recently introduced fresh new look for Artisan, we took some time to identify new Artisan commands to further improve the Laravel experience. Another newly introduced command is "about". This command displays information about your application's environment.
Laravel: New "model:show" Command
Following on from the recently introduced fresh new look for Artisan, we took some time to identify new Artisan commands to further improve the Laravel experience. One of the newly introduced commands is "model:show". This command dumps out the model and table highlights for the given model.
Laravel: Refreshing Artisan
On today's release of Laravel v9.21.0, we’re bringing you a fresh new look for Artisan: a brand new console output on the vast majority of Laravel commands that deliveries a better console experience, and displays more information in commands such as "migrate" or "queue:work".
2022-07-18 incident update
Post-mortem report for the Deploy and Subhosting outage on July 18th
Fri, July 15
Laravel Pint v1.0 Released
After a few beta releases, today we've finally reached the first stable release of Pint. And, starting with next week's release of Laravel, Pint will be included on every new Laravel application as a `dev` dependency.
July 13th Utah Outage Update
Post-mortem report for the outage on July 13th and 14th 2022
Thu, July 14
Longhorn PHP 2022 - CFP Open
Howdy, y'all! 🤠 is returning for its 4th year in Austin, TX! We are a community-run conference for PHP developers in Texas and beyond. We are excited to bring PHP developers from all backgrounds together again for 3 days of fun and education. Longhorn PHP We are currently . Talk ideas will be accepted until August 11, 2022. accepting submissions for 50 minute talks and 3 hour tutorials While the , we also have our Blind Bird tickets available for sale. CFP is open Register now! Follow us on , or signup for emails at to get notified with important conference updates. Twitter longhornphp.com
Wed, July 13
Bun v0.1.4
Release notes for Bun v0.1.4
Tue, July 12
Bun v0.1.3
Release notes for Bun v0.1.3
Mon, July 11
Unbound 1.16.1 released
We are pleased to announce the release of version 1.16.1 of the Unbound recursive DNS resolver. This release fixes a number of bugs. The number of nxdomains encountered when looking up a nameserver is not counted as such when the lookup was from cache. Also parent side queries …