{
  "id": 15947376,
  "title": "Today's PHP Security Release, and How We're Strengthening PHP Security (PHP Foundation)",
  "url": "https://urgent.news/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security-15947376",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-21T20:20:34.000Z",
  "source": {
    "name": "LWN",
    "slug": "lwn",
    "url": "https://lwn.net/Articles/1102060/"
  },
  "original_language": "en",
  "account": "The PHP Foundation has recently released a blog post detailing the recent security vulnerabilities discovered in PHP and the challenges faced in resolving them. The team responsible for PHP's security had to consider several potential solutions, each with its own set of drawbacks. These included potential compatibility issues, the risk of new denial-of-service attacks, and the need for modifications to a large number of third-party extensions. The consensus-based decision-making process within the PHP security team made it difficult to select the most suitable solution, as they were wary of the consequences of implementing the wrong choice. Additionally, the limited availability of core developers with the required expertise to address the issue further exacerbated the situation, leading to repeated delays in the development and implementation of a fix. The PHP Foundation acknowledges that this delay was a structural failure, attributable to both the decision-making process of the security team and its limited resources.",
  "summary": "The PHP Foundation has put out a blog entry explaining how the vulnerabilities disclosed today came about and why they took so long to fix. To fix the OOM problem, the PHP security team developed several competing approaches, but each came with its own trade-offs: backward compatibility breaks, new denial-of-service potential, or requiring changes to many third-party extensions which seemed…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 3,
    "also_reported_by": [
      {
        "outlet": "Hacker News",
        "title": "Today's PHP Security Release, and How We're Strengthening PHP Security",
        "url": "https://urgent.news/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security",
        "published": "2026-10-21T15:48:56.000Z"
      },
      {
        "outlet": "Simon Willison",
        "title": "Today's PHP Security Release, and How We're Strengthening PHP Security",
        "url": "https://urgent.news/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security-15933668",
        "published": "2026-10-21T18:41:53.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}