In 2024, PHP underwent its first external security audit in years. The PHP Foundation secured funding from the Sovereign Tech Agency to organize this audit through OSTIF, and it was carried out by Quarkslab. While fixing one of the issues Quarkslab reported, a PHP core developer contracted by the PHP Foundation found the first signs of the OOM problem behind CVE-2026-109618. In 2024, a potential exploit for the OOM problem was theorized, but no concrete vectors were found and other concrete issues with clear impact overshadowed these concerns.
Archiv: Aktualisierungem / updates
Security advisory: Critical remote code execution vulnerabilities, update now
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
F-Droid 2.0 Released After 10 years With Major Redesign to Transform Open-Source Android App Discovery
(September 26, 2026)
F-Droid has released version 2.0 of its official Android app, delivering its largest client update in a decade. The open-source Android app repository said the release follows more than a year of development and 14 test builds, with a staged rollout planned over the coming weeks.
ClassicPress 2.7.0 Release Notes
We’re happy to announce the release of ClassicPress 2.7.0.
This is a security, feature and maintenance release.
ClassicPress Version 2.6.0 is Out!
We’re delighted to announce the release of ClassicPress 2.6.0!
This version focuses on updating compatibility with modern technology. It includes support for PHP 8.5, a strategy parameter for wp_enqueue_script(), inline attachments in wp_mail, and Twemoji v16.
It also introduces a new ability to delete post and page revisions. Previously, this was possible only by going into the database manually. We’ll post a guide about how to use this feature within the next few days.