Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Fact · timing · disputed
The pre-announcement was published at 19:30 UTC on 20 October
The php.net feed says 20:32 UTC; oss-security relayed it at 20:22:51 UTC, so it was public by then.
Fact-check
A2 Reported●●○○○○ disputed · Event · verdict: holds
Only the PHP Foundation states 19:30 UTC, and the same post later says 'pre-announcement around 20:00 UTC'. The oss-security relay of the php.net text (Date 13:22:51 -0700 = 20:22:51Z) bounds it from above, and the feed's 20:32:00Z is later than that relay, so the feed time cannot be the publication time. One party's self-report, A2; 'disputed' fits.
| Capture checked | Result | What it says | sha256 of the text read |
|---|---|---|---|
| php-foundation-blog-security-release | carries | In response, the PHP project brought its pre-announcement forward and published it at 19:30 UTC. | a1be057adc1c5bfa |
| php-foundation-blog-security-release | partial | As a result of the leak and pre-announcement around 20:00 UTC, Calif, one of the security firms | a1be057adc1c5bfa |
| openwall-oss-security-2026-10-20-34 | partial | Date: Tue, 20 Oct 2026 13:22:51 -0700 | 57b273733e7d5fe6 |
| php-net-advisory | partial | <published>2026-10-20T20:32:00+00:00</published> | 79c12996a433f66b |
| php-net-advisory | absent | nothing that carries it | df0b1bba3deae282 |
Open tickets: Finding-40, Finding-92.
Graded in Run-1, resting on captures up to 2026-10-22 08:14 UTC. The scale is on the fact-check page.
This fact over time
- 2026-10-20 20:22 UTCoss-security publishes Upcoming Critical PHP Security Release
- 2026-10-21PHP Foundation publishes Today's PHP Security Release, and How We're Strengthening PHP Security
- 2026-10-21php.net publishes Security advisory: Critical remote code execution vulnerabilities, update now
- 2026-10-22 08:09 UTCSaved into the evidence vault: PHP Foundation
- 2026-10-22 08:09 UTCSaved into the evidence vault: php.net
- 2026-10-22 08:14 UTCSaved into the evidence vault: oss-security
- 2026-10-22Enters this site as disputed in v0.1.0 (reconstructed from git)
Published: when the source says it was published. Saved: the first capture into the evidence vault. The rest are this site: the release in which the fact first appeared and every release that changed its wording, sources or status.
What it rests on
Where this fact appears
In the briefings for:
And on every claim.
Every version of this fact
v1 · site v0.1.0 · 22 October 2026 · disputed
The pre-announcement was published at 19:30 UTC on 20 October Who says it: PHP Foundation Status: disputed Topic: timing Sources: php-foundation-blog-security-release, openwall-oss-security-2026-10-20-34, php-net-advisory