PHP issues emergency fixes for two critical remote-code-execution flaws
Versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 contain the fixes. AWS says it detected exploitation attempts four days before public disclosure.
Open Source
GitHub begins ubuntu-latest migration to Ubuntu 26.04
The staged rollout runs through November 19 and may send identical workflows to different images; test or temporarily pin the runner.
China proposes controls on 23 AI technologies while excluding APIs
Consultation runs through November 15 as covered transfers already require registration; open-source code and online services receive different treatment.
OSERA brings major banks together to standardize open-source software fixes
FINOS says it has patched more than 50 Spring and Java projects, but access to production-ready packages remains limited to alliance members.
Blender case study: how the community bought freedom for the code
A €100,000 campaign turned software threatened by a company shutdown into open infrastructure for 3D creation.
OpenRCT2 case study: how an open engine modernized RollerCoaster Tycoon 2
The community reimplemented the engine, removed limitations, and added multiplayer while keeping an important boundary: assets from the original game are still required.
AO3 case study: how fans built an archive outside platform logic
Ad-free and donation-funded, Archive of Our Own combines open-source software, volunteer labor, and a taxonomy designed to preserve fanworks.
Let’s Encrypt case study: how automation helped make HTTPS the default
The nonprofit certificate authority removed price and manual work from the equation, while ACME turned certificate renewal into routine infrastructure.
AO3 case study: how a community turned fanworks into digital heritage
The archive grew without advertising, kept its code open, and treated technical features as decisions about agency, memory, and access.
Blender case study: how open movies turn production into software development
Blender's strategy brings artists and developers into real productions, exposing bottlenecks while returning films, assets and improvements to the community.
Open Source Milestones: UEFI V2 Elevates Firmware Security as AWS Preserves DuckDB Independence
New V2 UEFI capsule architecture enhances firmware flashing security and design, while AWS's acquisition of DuckLabs preserves open-source DuckDB governance.
AWS Acquires DuckLabs While Keeping DuckDB Independent
Amazon Web Services has acquired DuckLabs, the maintainer of the DuckDB analytical database, ensuring the project's independence and open-source nature remain untouched.