PHP maintainers warn of two imminent emergency security patches
What happened
According to an Ars Technica report, the PHP maintainers have warned web developers that they plan to release two emergency security patches imminently. The report's headline describes the patches as emergency releases.
When it started
The source URL suggests the report was published in October 2026, but the exact publication date and release dates of the patches are not given in the material provided.
How it spread
The details of the vulnerabilities and the exact release process are not available in the information provided. Developers are advised by the maintainers to prepare for the patches, according to the headline.
Why it matters
PHP is widely used to run websites, so emergency security patches can matter to many developers and site operators. The specific risks addressed by the patches are unknown from the information given.