Author: Derick Rethans (derickr)
Date: 2026-10-20T20:25:48+01:00
Commit:
https://github.com/php/web-php/commit/04b67f5e36f668e9bb57b4a6f28c8641bd92f347
Raw diff:
https://github.com/php/web-php/commit/04b67f5e36f668e9bb57b4a6f28c8641bd92f347.diff
Add release pre-announcement
Changed paths:
A public/archive/entries/2026-10-20-1.xml
M public/archive/archive.xml
Diff:
diff --git a/public/archive/archive.xml b/public/archive/archive.xml
index 529c2c87de..42b853105a 100644
--- a/public/archive/archive.xml
+++ b/public/archive/archive.xml
@@ -9,6 +9,7 @@
<uri>http://php.net/contact</uri>
<email>[email protected]</email>
</author>
+ <xi:include href="entries/2026-10-20-1.xml"/>
<xi:include href="entries/2026-10-08-1.xml"/>
<xi:include href="entries/2026-09-24-5.xml"/>
<xi:include href="entries/2026-09-24-4.xml"/>
diff --git a/public/archive/entries/2026-10-20-1.xml
b/public/archive/entries/2026-10-20-1.xml
new file mode 100644
index 0000000000..4438ed7cbf
--- /dev/null
+++ b/public/archive/entries/2026-10-20-1.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="utf-8"?>
+<entry xmlns="http://www.w3.org/2005/Atom";>
+ <title>Upcoming Criticial PHP Security Release</title>
+ <id>https://www.php.net/archive/2026.php#2026-10-20-1</id>
+ <published>2026-10-20T20:32:00+00:00</published>
+ <updated>2026-10-20T20:32:00+00:00</updated>
+ <link href="https://www.php.net/index.php#2026-10-20-1"; rel="alternate"
type="text/html"/>
+ <link href="https://www.php.net/archive/2026.php#2026-10-20-1"; rel="via"
type="text/html"/>
+ <category term="frontpage" label="PHP.net frontpage news"/>
+ <content type="xhtml">
+ <div xmlns="http://www.w3.org/1999/xhtml";>
+ <p>
+ The PHP security team would like to give advance notice of an upcoming
+ security release, scheduled for Wednesday, 21 October 2026 at 14:00
+ UTC. It addresses two critical vulnerabilities, both rated CVSS v4.0
+ 9.2.
+ </p>
+ <p>
+ All PHP users are encouraged to prepare now so they can upgrade as
+ soon as the release is available.
+ </p>
+ <p>
+ We reserve the right to release earlier should details of either
+ vulnerability become public, or should evidence of active exploitation
+ appear in the wild.
+ </p>
+ <p>
+ Full details, affected versions, and the fixed versions will be
+ published with the release.
+ </p>
+ <p>
+ Thank you for helping us keep PHP secure.
+ </p>
+ </div>
+ </content>
+</entry>
