On Tuesday 20 October (Wednesday morning in Australia), the PHP Foundation announced the pending release of fixes for two critical security vulnerabilities in PHP, the language Drupal is written in. The release was scheduled for 14:00 UTC, which would be 1am for us. This post details how our team prepared and handled the rollout of this release to our clients’ sites.
PreviousNext: How we secured our clients’ Drupal sites with critical PHP security updates
calendar_today
October 22, 2026
domain
drupal