12 Oct 2026

Apache 2.4.69 Security Release

Security release!

Multiple vulnerabilities.  See changelog

https://www.apachelounge.com/Changelog-2.4.html

12 Oct 2026

Nodejs 26.11.1 release

05 Oct 2026

Git 2.56.0.2

New Features

Bug Fixes

05 Oct 2026

Mailpit 1.31.4 Released!

Fix
Prevent duplicate messages from being added in websocket handlers (axllent/mailpit#737)
Set hostname for HELO/EHLO in SMTP client creation (axllent/mailpit#738)

04 Oct 2026

Bruno 4.2.0 Released!

04 Oct 2026

Mailpit 1.31.2 Security Release!

Security release!

Security

Feature

  • Add major version tag for Docker images in workflow (#734)

Chore

  • Improve message rendering performance with envelope caching
  • Update Go dependencies
  • Update node dependencies
  • Update caniemail test database

Fix

  • Re-quote local-parts in API JSON responses (#732)

24 Sep 2026

PHP 8.2.34, 8.3.35, 8.4.26, 8.5.11 & 8.6.0RC2

Security release!

  • Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison). (CVE-2026-91768)

  • Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire protocol). (CVE-2025-1218)

  • Fixed GHSA-vvx9-73fr-5jjx (TLS hostname verification falls back to CN after SAN mismatch). (CVE-2026-91769)
  • Fixed GHSA-xr7j-rvgx-xq5p (Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN). (CVE-2026-91767)

  • Fixed GHSA-j3wh-g957-2m85 (Integer overflow in phar_tar_number() allowing TAR archive entry injection). (CVE-2026-6103)

  • Fixed GHSA-rgrp-mwpx-f6rm (Unbounded recursion in server-side cleanup_xml_node()). (CVE-2026-91765)
  • Fixed GHSA-cj93-vc83-wgqv (Integer overflow to buffer overflow in SOAP HTTP parsing). (CVE-2025-14181)

  • Fixed GHSA-7875-c8px-7q5f (Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header). (CVE-2026-93682)

  • Fixed GHSA-88hq-2827-7pg6 (Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL). (CVE-2026-92842)
  • Fixed GHSA-fpwc-w8rq-cr92 (Cross-origin credential leak in HTTP stream wrapper redirects). (CVE-2026-91766)

  • Fixed GHSA-9f67-6fw4-hpfp (Reserved device names are not rejected before file and stream I/O). (CVE-2026-17545)

23 Sep 2026

NodeJS 26.9.0 & 24.21.0 Released

23 Sep 2026

Composer 2.10.3 Security fix Released

Security release!

Security: Validate package bin paths against path traversal using symlinks (GHSA-96h3-5x6v-m776, CVE-2026-59944)
Security: Fixed command injection via malicious Perforce url (GHSA-rvx4-ffvw-m9q3)
Security: Sanitize URL-embedded usernames/token in a few more places (#13044)
Security: Fixed matching of gitlab URLs to avoid possible credential leak to the wrong domain (#12988)

Fixed PHP 8.6 deprecation warnings (#12967, #13028)
Fixed error output when a policy blocks a package version to be clearer (#12993)
Fixed the lock file's content-hash with a conflict marker ending up breaking at runtime (#13048)
Fixed possible race condition while creating directories like the cache dir when running multiple Composer processes in parallel (#12977)
Fixed forgejo support to handle empty repositories better (#12968)
Fixed FilterListApiClient not forwarding transport options (#13040)

23 Sep 2026

Mariadb 13.0.2 Released

https://mariadb.com/docs/release-notes/community-server/changelogs/13.0/13.0.2

23 Sep 2026

Mysql 26.7.0 Released

https://dev.mysql.com/doc/relnotes/mysql/26.7/en/news-26-7-0.html

22 Sep 2026

Powershell 7.6.6 Released

7.6.6

Engine Updates and Fixes

  • Fix FileOnlyEntry crashing on older versions of Windows (#27931)
  • Add support for new WLDP setting EnableFileOnlyEntry (#27922)

General Cmdlet Updates and Fixes

  • Remove the element from CmdletizationCoreResources.resx (#27932)

Tests

  • Fix the localization tests for Release Automation (#27945)

Build and Packaging Improvements

Update to .NET SDK 10.0.401

Customization improvements

Customizations apply to each console instead of system wide.

Results 1 - 12 of 362

Our Supporters

Tassos gr
codium
AM Graphix
Joomdonation
Simplify your web
OCH

Sorry, this website uses features that your browser doesn't support. Upgrade to a newer version of Firefox, Chrome, Safari, or Edge and you'll be all set.