PHP CVE-2026-109618/109619 处理方案
php.net/archive/2026.php#202…
PHP 8.x 立即升级到官方最新版本
PHP 7.x 需要使用官方发布的修复版源代码编译
PHP 5.x 需要使用 PHP 核心开发者 Ondřej Surý 提供的修复版本
附:
PHP 7.x 修复版源代码地址
github.com/php/php-src/tree/…
PHP 5.x 修复版源代码地址
packages.sury.org/php/pool/m…
Contra todo pronóstico y sin aviso previo, Ondřej Surý ha aplicado los parches CVE-2026-109618 y CVE-2026-109619 tanto para PHP 5.6 como para PHP 7.4. En el log aparece: "Backported from 8.2.35". Nos ha salvado el culo a los que tenemos servidores Debian/Ubuntu.
Omar Pasini retweeted
‼️ If you run a branch older than 8.2 — 8.1, 7.x, or 5.x — PHP will not fix it.
😬 There is no patch coming for you from PHP.
Your only options are to upgrade to a supported branch, take the system off the internet, or get a backported fix from your Linux distribution or host, if they offer one.
🚨 PHP2Shell: the one-line “fix” everyone shared overnight — session.upload_progress.enabled=0 — isn’t enough on its own, the firm that suggested it now says.
A PHP core developer put it bluntly: “the only mitigation is patching / upgrading PHP.”
No patch until 14:00 UTC today.
Here’s what actually cuts your risk before then → thehackernews.com/2026/10/ph…
Omar Pasini retweeted
Yes, this is WinForms. Klaus Loeffelman shows the .NET 11 preview: msft.it/6012aoirs
Extremely cool discovery
CLAUDE FOUND THE SEEDS
anthropic.com/research/ecdsa…
Omar Pasini retweeted
A report that takes minutes should not need an open HTTP request the whole time.
I'd save the job first, then return 202 Accepted with its ID. The user can check its progress while a worker does the work.
At first, that worker can run in the same app. But it still shares CPU and memory with the API.
When those jobs slow down normal requests, put the worker in its own process behind a queue. You can then add workers without adding copies of the API.
Watch how long jobs wait, handle failed jobs, and make it safe to retry a job. A queue can hold a burst of work. It cannot fix a permanent lack of capacity.
I walk through each step and its cost here:
milanjovanovic.tech/blog/how…
P.S. Join my newsletter for more .NET guides. Start with a reading path that fits your goals:
milanjovanovic.tech/newslett…
Omar Pasini retweeted
Remember dotnet-steward.damianedwards… to easily update all your standalone .NET installs (SDKs, runtimes) on Windows!
(.NET updates will be out later today)
Omar Pasini retweeted
Blog post about how @aspiredotdev added one of its most requested features: dashboard persistence! 💾
📊 SQLite-backed logs & telemetry
🔄 Compare current and historical telemetry
🧠 76% less memory under load
📈 10× higher default telemetry limits
devblogs.microsoft.com/aspir…
Omar Pasini retweeted
Today marks a new chapter for Windows, as we bring unmetered intelligence to every desk and every home, and make every PC a place where agents can work securely on your behalf.
Some highlights of what we announced:
• MAI-Code-1.1 Flash: 137B parameter coding model w/ 256K context window, which is now optimized to run on your PC!
• GitHub Copilot now hands off work to local models like MAI-Code-1.1 Flash, helping projects cost a lot less without sacrificing quality.
• With Hybrid Intelligence, Copilot can now take action directly on the PC and keep sensitive work on your device.
• And with Code in Copilot, you can essentially build any software you need on your desktop, without any cloud token spend, and it’s just super at it. You’re no longer limited to what’s in an app store! Your PC becomes an infinite software factory.
• Security is foundational to all this, which is why we are also bringing together Windows and Agent 365 so agents can work within secure boundaries on-device, including MXC a local sandbox for agent execution. Windows becomes your secure agent box!
• All this comes to life on a new generation of devices, like Surface Laptop Ultra, powered by NVIDIA RTX Spark.
Can’t wait to see what you build with all this.
Omar Pasini retweeted
Just released 1.2.0 with significant new features! 🎉
- Full Project Code Editor
- Integrated Terminals
- Automations - supporting GitHub, GitLab, AZDO
- Git worktrees with diff changes
- Improved Plugin experience - very easy to create one with agent
and much more... 🤯
Omar Pasini retweeted
Heya! 🥳 Today I released CodeAlta 1.0.0, the AI coding agent developed in C# .NET (mostly) which includes a brand-new desktop frontend! 🚀 Works with your ChatGPT / Copilot subscriptions and more. Single file C# plugins also supported there! 🤯
Omar Pasini retweeted
This guy re-created all the adobe apps with opus-5.5, ported them to rust, and opensourced them
something really cool is happening
Readers added context they thought people might want to know
These projects are partial open-source Rust reimplementations of Adobe apps (built rapidly with AI agents), not complete recreations; their READMEs and roadmaps document many missing features and features still in development.
github.com/storytold/phot…
github.com/storytold/vect…
github.com/storytold/vect…
github.com/storytold/film…
github.com/storytold/film…
github.com/storytold/ligh…
getartcraft.com
🤖 Blazor goes agentic! 🚀
New Blazor AI components help you build chat UIs, stream responses, manage conversations, and create AI-powered experiences using familiar .NET patterns. 🧠⚡
Build smarter apps with less boilerplate.
📖 Read: msft.it/6014altpn
Cloudflare is building its own Certificate Authority to give websites free SSL/TLS certificates.
It has applied to be trusted by Chrome, Apple, Microsoft and Mozilla, and is acquiring an existing trusted root from GlobalSign.
This would let Cloudflare issue the TLS certificates websites use to prove their identity and establish HTTPS connections.
And starting in 2027, it plans to issue post-quantum certificates too.
Cloudflare is now moving into the trust infrastructure behind HTTPS itself.
Source: blog.cloudflare.com/cloudfla…
Omar Pasini retweeted
WSL containers is now generally available.
Build, run and deploy Linux containers directly on Windows with the WSL containers CLI and API 🧵
Omar Pasini retweeted
Desktop‑class apps.Written in C#.Running in your browser. All apps are powered by @UnoPlatform wieslawsoltes.github.io/UnoS…
Omar Pasini retweeted
🚨It's release day!!!🚨 Hello Aspire 13.6, and hello dashboard persistence👋🏻 One of the longest awaited Aspire features has now landed, along with plenty of other goodies.
🪶 Read the blog: devblogs.microsoft.com/aspir…
📜 See the full What's New: aspire.dev/whats-new/aspire-…







































