微信内可能无法直接打开本站。请点右上角 ··· → 在浏览器打开，或复制链接。
Security public service announcements: Critical PHP update on Wednesday, October 21, 2026 (14:00 UTC) - PSA-2026-10-20
RSS 官方收录 · 可信分层展示
关键摘要
Date: 2026-October-21Description: PHP has announced a critical PHP security release for Wednesday, October 21, 2026, at 14:00 UTC.…
- We recommend that all Drupal site owners reserve time to ensure their …
- Site owners are responsible for maintaining the security of their host…
- In rare cases, the Drupal Security Team will post an informational pub…
规则摘要 · 来源可核验
正文提要
PHP has announced a critical PHP security release for Wednesday, October 21, 2026, at 14:00 UTC. We recommend that all Drupal site owners reserve time to ensure their PHP version is updated as soon as the release is available.
Site owners are responsible for maintaining the security of their hosting platform
It is the policy of the Drupal Security Team that site owners are responsible for monitoring and maintaining the security of third-party libraries and any non-Drupal components of the application and hosting platform. In rare cases, the Drupal Security Team will post an informational public service announcement (PSA) such as this one, but the remit of the Drupal Security Team remains limited to code hosted on Drupal.org’s systems. Previous PSAs on third-party code in the Drupal ecosystem include:
- External libraries and plugins - PSA-2011-002
- Various Third-Party Vulnerabilities - PSA-2019-09-04
- Third-Party Libraries and Supply Chains - PSA-2024-06-26
- Third-Party Libraries and Supply Chains - PSA-2025-09-17
This post is likely to be updated as the situation evolves and more information is available.
- Lee Rowlands (larowlan) of the Drupal Security Team
- James Gilliland (neclimdul) of the Drupal Security Team
- Angie Byron (webchick) of the Drupal Security Team
- Jess (xjm) of the Drupal Security Team