|
1 | 1 | <?xml version="1.0" encoding="utf-8"?> |
2 | 2 | <entry xmlns="http://www.w3.org/2005/Atom"> |
3 | | - <title>PHP Core Undergoes Security Audit – Results Now Available</title> |
4 | | - <id>https://www.php.net/archive/2025.php#2025-04-10-1</id> |
5 | | - <published>2025-04-10T11:59:24+00:00</published> |
6 | | - <updated>2025-04-10T11:59:24+00:00</updated> |
7 | | - <link href="https://www.php.net/index.php#2025-04-10-1" rel="alternate" type="text/html"/> |
8 | | - <link href="https://www.php.net/archive/2025.php#2025-04-10-1" rel="via" type="text/html"/> |
9 | | - <category term="frontpage" label="PHP.net frontpage news"/> |
10 | | - <content type="xhtml"> |
11 | | - <div xmlns="http://www.w3.org/1999/xhtml"> |
12 | | - A focused security audit of the PHP source code (<a href="https://github.com/php/php-src">php/php-src</a>) was recently completed, commissioned by the <a href="https://www.sovereign.tech/">Sovereign Tech Agency</a>, organized by <a href="https://thephp.foundation/">The PHP Foundation</a> in partnership with <a href="https://ostif.org/">OSTIF</a>, and performed by <a href="https://www.quarkslab.com/">Quarkslab</a>. The audit targeted the most critical parts of the codebase, leading to 27 findings, 17 with security implications, including four CVEs. |
13 | | - |
14 | | - All issues have been addressed by the PHP development team. Users are encouraged to upgrade to the latest PHP versions to benefit from these security improvements. |
15 | | - |
16 | | - Read the full <a href="https://thephp.foundation/assets/files/24-07-1730-REP-V1.4_temp.pdf/24-07-1730-REP-V1.4_temp.pdf">audit report</a>. |
17 | | - More details in <a href="https://thephp.foundation/blog/2025/04/10/php-core-security-audi-results">the PHP Foundation blog post</a>. |
18 | | - |
19 | | - If your organization is interested in sponsoring further audits, please contact The PHP Foundation team: <a href="mailto:contact@thephp.foundation">contact@thephp.foundation</a>. |
20 | | - </div> |
21 | | - </content> |
| 3 | + <title>PHP Core Undergoes Security Audit – Results Now Available</title> |
| 4 | + <id>https://www.php.net/archive/2025.php#2025-04-10-1</id> |
| 5 | + <published>2025-04-10T11:59:24+00:00</published> |
| 6 | + <updated>2025-04-10T11:59:24+00:00</updated> |
| 7 | + <link href="https://www.php.net/index.php#2025-04-10-1" rel="alternate" type="text/html"/> |
| 8 | + <link href="https://www.php.net/archive/2025.php#2025-04-10-1" rel="via" type="text/html"/> |
| 9 | + <category term="frontpage" label="PHP.net frontpage news"/> |
| 10 | + <content type="xhtml"> |
| 11 | + <div xmlns="http://www.w3.org/1999/xhtml"> |
| 12 | + <p> |
| 13 | + A focused security audit of the PHP source code (<a href="https://github.com/php/php-src">php/php-src</a>) was recently completed, commissioned by the <a href="https://www.sovereign.tech/">Sovereign Tech Agency</a>, organized by <a href="https://thephp.foundation/">The PHP Foundation</a> in partnership with <a href="https://ostif.org/">OSTIF</a>, and performed by <a href="https://www.quarkslab.com/">Quarkslab</a>. The audit targeted the most critical parts of the codebase, leading to 27 findings, 17 with security implications, including four CVEs. |
| 14 | + </p> |
| 15 | + <br/> |
| 16 | + <p> |
| 17 | + All issues have been addressed by the PHP development team. Users are encouraged to upgrade to the latest PHP versions to benefit from these security improvements. |
| 18 | + </p> |
| 19 | + <br/> |
| 20 | + <p> |
| 21 | + Read the full <a href="https://thephp.foundation/assets/files/24-07-1730-REP-V1.4_temp.pdf/24-07-1730-REP-V1.4_temp.pdf">audit report</a>. |
| 22 | + </p> |
| 23 | + <p> |
| 24 | + More details in <a href="https://thephp.foundation/blog/2025/04/10/php-core-security-audi-results">the PHP Foundation blog post</a>. |
| 25 | + </p> |
| 26 | + <br/> |
| 27 | + <p> |
| 28 | + If your organization is interested in sponsoring further audits, please contact The PHP Foundation team: <a href="mailto:contact@thephp.foundation">contact@thephp.foundation</a>. |
| 29 | + </p> |
| 30 | + </div> |
| 31 | + </content> |
22 | 32 | </entry> |
0 commit comments