Hi, as you might have heard, CVE-2026-109618 and CVE-2026-109619 has been identified in PHP.
While impact is being assessed, openrepos is in read-only mode.
Not all versions of PHP out there received security patch for CVE, thus this tirggered some additional infra upgrade.
This should also potentually reduce monthly costs in half as a result.
I appreciate your intent, and will let you know if any help will be required.
Comments
munkstolen
Sun, 2026/10/25 - 21:01
Permalink
Makes good sense, is there any prognosis on when open repos might open up again? :)
basil
Sun, 2026/10/25 - 21:05
Permalink
Current ETA would be around November 6th. Tentative :)
mercurio
Mon, 2026/11/02 - 08:35
Permalink
Thank you very much, and good luck with your work! :-)
koleesch
Sat, 2026/11/07 - 17:42
Permalink
Thank you for the work. When it is possible to upload a new versions?
basil
Sat, 2026/11/07 - 17:46
Permalink
Upgrade and migration is in progress. Will take extra 2-4 days.
koleesch
Sat, 2026/11/07 - 17:48
Permalink
Ok, thank you for your work. I will try it in a few days.
Mister_Magister
Sat, 2026/11/07 - 21:24
Permalink
Man if you need help I can help out :D It's bit too long to call it fixing CVE
basil
Sun, 2026/11/08 - 19:38
Permalink
Well, prior to 6th I was on holidays :-D
Not all versions of PHP out there received security patch for CVE, thus this tirggered some additional infra upgrade.
This should also potentually reduce monthly costs in half as a result.
I appreciate your intent, and will let you know if any help will be required.
pauligrinder
Thu, 2026/11/12 - 22:19
Permalink
Sounds great, at least something good comes out of the CVE's. I'm also available to help if needed!