PHP.Watch News

Drupal security updates 7.82, 8.9.17, 9.1.11, and 9.2.2 are released with the dependency `Archive_Tar` updated to 1.4.14, which fixes a symlink path traversal vulnerability.

PHP 8.1 reached its feature-freeze today. No new RFCs will made for PHP 8.1, and maintainers will soon branch off PHP 8.1.

The first PHP 8.1 development release, Alpha 1, releases on June 10, 2021.

The vote to select two additional Release Managers for PHP 8.1, along with Joe Watkins concluded today with Ben Ramsey and Patrick Allaert being Release Managers-elect.

An update to recent the `git.php.net` compromise and attempt to place a backdoor.

`git.php.net`, the Git server that hosted PHP source code was hacked, and contained a RCE backdoor. PHP source is now moved to GitHub. Further, the upcoming PHP 8.0.4 and 7.4.17 are delayed by two weeks.

PHP 8.1's release managers will be appointed soon, and PHP 8.1 GA release is currently scheduled for 25/Nov/2021