News for hackers. Stuff that matters.
Re:Upcoming Critical PHP Security Release by samueloph on Tuesday October 20, 2026 @04:19PM (#50172076)
Deciding to announce it like this is wild, it's an invitation for everyone to put their agents to work in order to find out what the vulnerability is and exploit it, while nobody is allowed to patch it until tomorrow.
Re:Upcoming Critical PHP Security Release by beberlei on Tuesday October 20, 2026 @04:27PM (#50172186)
It was leaked
Re:Upcoming Critical PHP Security Release by Operyl on Tuesday October 20, 2026 @04:40PM (#50172381)
Where?
Re:Upcoming Critical PHP Security Release by walth on Tuesday October 20, 2026 @04:53PM (#50172526)
Re:Upcoming Critical PHP Security Release by Operyl on Tuesday October 20, 2026 @04:59PM (#50172585)
I don't see any details of the vulnerability leaked except "code execution"...?
Re:Upcoming Critical PHP Security Release by tossit444 on Tuesday October 20, 2026 @05:05PM (#50172668)
It got flagged already, can't see it.
Re:Upcoming Critical PHP Security Release by solyin on Tuesday October 20, 2026 @05:29PM (#50172948)
Whew! Imagine if the details were documented in the clear on HN for anyone to see.
Re:Upcoming Critical PHP Security Release by dang on Wednesday October 21, 2026 @01:38PM (#50184716)
(We've since merged the threads)
Re:Upcoming Critical PHP Security Release by nullbio on Tuesday October 20, 2026 @11:01PM (#50175564)
It's already been found and shared on X. It's only a matter of hours before untold numbers of sites are hacked.
Re:Upcoming Critical PHP Security Release by samueloph on Wednesday October 21, 2026 @11:02AM (#50182226)
exactly, that's why in my opinion the patches should have been made available straight away instead of doing this, it made it worse.