2026-10-27 13:45 UTC
pdo_duckdb 0.9.0, out today, bundles DuckDB 2.0.0, with opt-in lossless fetches for LIST, STRUCT, MAP and VARIANT, and a fix for lost writes between two connections to one file.
This month I also ran a security scan across all ten of my PHP extensions plus nameparser, and each has a fix release: a heap overflow from a malicious ClickHouse server, an appender use-after-free, a nested allowed_classes bypass, a 16 KB name taking 17 s to parse.
https://ilia.ws/blog/seventeen-seconds-to-parse-one-name-a-security-scan-across-eleven-php-projects
#php #duckdb #security
Replies (0)
No replies.