@PHPNewsnet

Covering PHP news since 2026

phpnews.net
Joined August 2026
  • Tweets96
  • Following3
  • Followers180
4Media
Chainguard Broke the php2shell Embargo phpnews.net/chainguard-php2s…

Chainguard Broke the php2shell Embargo

Chainguard CEO Dan Lorenc says exploit reports justified shipping PHP RCE fixes before the embargo lifted. The reports don't hold up, and it was the wrong call.

phpnews.net
4
3
18
6,347
The "IntlRelativeDateTimeFormatter" RFC is implemented for PHP 8.7. phpnews.net/rfcs/reldateform…

PHP RFC: IntlRelativeDateTimeFormatter: "3 Days Ago" in Any Locale

Adds IntlRelativeDateTimeFormatter for localized strings like "3 days ago" and "next Sunday".

phpnews.net
1
1
144
PHP 8.6.0RC4 is out for testing. PHP 8.6 is planned for November 19, 2026. phpnews.net/php-versions/8.6

PHP 8.6 Release Date and Support Timeline

PHP 8.6 is planned for release on November 19, 2026. Its support dates are set once it ships.

phpnews.net
1
48
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 are out, with security fixes. Time to update. phpnews.net/php-versions

PHP Version Checker: Is My PHP Version Still Supported?

Check any PHP version, like 8.2.14, or paste your php -v output. See if it still gets fixes, how many releases behind it is and which security fixes it is missing.

phpnews.net
1
2
59
There isn't an easy exploit for this PHP vulnerability eliastaylor.com/noexploit/

There isn't an easy exploit for this PHP vulnerability

Mass hysteria, or something.

eliastaylor.com
1
66
php2shell: A Tale of Two PHP Remote Vulnerabilities calif.io/php2shell/

php2shell by Calif Research

A tale of two PHP remote vulnerabilities

calif.io
2
165
phplives.dev: real things people shipped with PHP, now open source phplives.dev/

phplives.dev: PHP is not dead. PHP lives!

A manifest of real things people shipped with PHP in the last 6 months. Each one links to its own source and shows the date it shipped.

phplives.dev
3
893
PHP Foundation Explains the RCE Bugs and the Disclosure Leak phpnews.net/php-foundation-r…

PHP Foundation Explains the RCE Bugs and the Disclosure Leak

The PHP Foundation says the OOM bug behind today's PHP RCE fix was first spotted in 2024, the fix stalled for months, and a leak moved the release up a day.

phpnews.net
1
130
php2shell: How OpenAI Coordinated the PHP RCE Disclosure phpnews.net/php2shell-openai…

php2shell: How OpenAI Coordinated the PHP RCE Disclosure

OpenAI says its Patch the Planet program coordinated the php2shell disclosure after Calif used GPT-5.6 Sol to find a critical PHP bug Wiz also reported.

phpnews.net
3
262
PHP 8.5.12 Fixes Two Critical Remote Code Execution Bugs phpnews.net/php-critical-vul…

Critical PHP Vulnerabilities: What We Know So Far

The PHP security team is shipping a fix for two critical CVSS 9.2 vulnerabilities on October 21, 2026. What we know, what we don't, and how to prepare.

phpnews.net
2
100
Critical PHP Vulnerabilities: What We Know So Far phpnews.net/php-critical-vul…

Critical PHP Vulnerabilities: What We Know So Far

The PHP security team is shipping a fix for two critical CVSS 9.2 vulnerabilities on October 21, 2026. What we know, what we don't, and how to prepare.

phpnews.net
112
🚨 Everyone get ready for the upcoming Critical PHP Security Release php.net/archive/2026.php

PHP: News Archive - 2026

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

php.net
1
1
27
3,907
This week's PHP News newsletter is out: The History of PEAR, PHP's First Package Manager phpnews.net/newsletter/archi…

The History of PEAR, PHP's First Package Manager

4 stories and 16 community links from the week of Oct 13 - Oct 20, 2026.

phpnews.net
1
1
93
One week until International PHP Conference Munich 2026, starting October 27. phpnews.net/events/internati…

International PHP Conference Munich 2026

The International PHP Conference runs October 26 to 30, 2026 in Munich with eight tracks, two workshop days, and early bird pricing until August 20.

phpnews.net
3
80
Voting is open on the "Add Filter\Filter and Filter\Flag Enums" RFC until November 4. phpnews.net/rfcs/invalid_fil…

PHP RFC: Filter Enums: Typed IDs and Flags for filter_*()

Adds Filter\Filter and Filter\Flag backed enums for typed filter IDs and flags while keeping existing integer constants and arguments working.

phpnews.net
68
The "End PEAR Project Endorsement" RFC passed (40-0) for PHP 8.7. phpnews.net/rfcs/end_pear_en…

PHP RFC: PEAR: Ending PHP's Official Endorsement

Ends the PHP project's official endorsement of PEAR as a component framework and distribution system.

phpnews.net
1
1
354
Staying on top of the PHP ecosystem just got easier 👇 PhpStorm is proud to sponsor @PHPNewsnet to bring you the latest releases, RFCs, and community news every day! Check out today's updates: phpnews.net

PHP News: Daily PHP Tutorials, Releases & Package News

Daily PHP news, tutorials, package releases and community coverage from PHP News, updated as PHP developers need it.

phpnews.net
6
37
2,967
Looks like today's vote will pass, ending PHP's endorsement of Pear.
8
750
When Retries Make Things Worse: Protecting Your System From Overload wendelladriel.com/blog/when-…

When Retries Make Things Worse: Protecting Your System From Overload

How a slow dependency becomes an outage, and how deadlines, concurrency limits, retry budgets, and jitter protect useful work. A practical deep dive with PHP examples and a controlled overload test...

wendelladriel.com
34
Using Partial Function Application to define stricter functions gpb.moe/blog/pfa-strict-fns.…
1
72
Load more