Determinate Systems, Inc. | Status
Patched PHP security release
Updates
-
Oct 21, 2026 6:00 PM UTC
Determinate Secure Packages is now patched against today's announced PHP vulnerabilities. Please immediately update your Nix flakes to use the latest release.
For Flake URLs, see: https://docs.determinate.systems/secure-packages/#distributions
Please contact support if you have further questions: https://docs.determinate.systems/contact/
Monitoring -
Oct 21, 2026 1:40 PM UTC (4 hours and 20 minutes earlier)
Upstream has disclosed the vulnerabilities: https://www.php.net/index.php#2026-10-21-5
We are applying patches to all affected versions and will announce a release soon.
Identified -
Oct 21, 2026 1:38 PM UTC (2 minutes earlier)
Upstream has disclosed the vulnerabilities: https://www.php.net/index.php#2026-10-21-5
Identified -
Oct 21, 2026 12:01 PM UTC (1 hour and 36 minutes earlier)
We are aware of the PHP security disclosure scheduled for 14:00 UTC. We will update this page as soon as we know more.
Upstream announcement: https://www.php.net/archive/2026.php#2026-10-20-1
Identified -
Oct 21, 2026 11:49 AM UTC (12 minutes earlier)
We are aware of the PHP security disclosure scheduled for 14:00 UTC. We will update this page as soon as we know more.
Identified