The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Pretty cool that bandwidth is so cheap/easily available in France for FTTH. I can download 52TB in a month from the homelab without anyone asking questions :)
(and no, I'm not torrenting linux ISOs)