Connect your Claude, Codex or OpenClaw for full transcripts on millions of podcasts. Two week free trial, cancel anytime.

Start free trial →
MD Michael Dyrynda Michael Dyrynda Principal engineer at LMG Asset Finance in Adelaide, Australia, who works with PHP and Laravel and organizes the Laracon AU conference.

“The fallout was like massive. It reached our local radio stations, to hear PHP being talked about on local radio, to see government security advisories... I think the Japanese government came out and said, just turn your servers off. If you can't patch, just turn them off.”

Laravel News Podcast · Laravel Ecosystem · October 2026

“The fallout was like massive. It reached our local radio stations, to hear PHP being talked about on local radio, to see government security advisories... I think the Japanese government came out and said, just turn your servers off. If you can't patch, just turn them off.” — Michael Dyrynda, Laravel News Podcast

Context

On the week of the PHP remote-code-execution vulnerabilities in October 2026: the patch shipped on schedule, but every Docker image, PPA and hosting platform downstream had to be rebuilt, and the story broke out of the developer world into local radio and government advisories.

Transcript

Laravel News Podcast Around 07:54 into the episode
Michael Dyrynda

…up and running. Vapor was patched, requires a bit of manual work. Forge was patched, required a bit of manual work to go into the UI and then click update. But of course, then you've got everyone who's following these things is trying to get their environments patched and updated. And so that's...

Jacob Bennett

…clear out and clean up. And I was just working with it just a couple of minutes ago here and everything's kind of back to good, back to normal. So but yeah, it was like man alive. We rely on this quite heavily. And so when it was not working perfectly, it was like very, you know, noticeable. So.

Michael Dyrynda

Yeah. And the and the fallout was like massive. Right, widespread. You know, it reached our local radio stations to hear PHP being talked about on like local radio to see government security advisories like our government, UK government. I think the Japanese government came out and said, just turn your servers off. If you can't patch, just turn them off kind of thing. So there was a bit of that going around at the moment, but we've got everything updated. Monitoring the situation, obviously, because there's every chance that some of this stuff was, you know, not that there's any evidence of it. There was people like probing and things like that, but no active exploitation as far as we're aware. So shout out to everyone that was involved in getting all this stuff sorted out for us.

Jacob Bennett

Absolutely. All right, folks. Well, with that out of the way, we are wanting to bring you the news. Of course, we're going to start with Laravel 1335. We're going to talk about route query and model defaults in Laravel 1335. So route query is the first one. Joel Butcher brought route query to…

Michael Dyrynda

Inertia version 3.9 introduced a new background option that helps you to pause polling in your hidden tabs. This update helps optimize resource usage in your Laravel apps using Inertia by reducing unnecessary polling. The option has been added to the use poll and router poll methods to manage…

Jacob Bennett

All right. Laravel13.36 is up. Let's first talk about Eric MP33's contribution, which is, we all like consistency. There's a couple different ways that you can define validation rules. One is just like strings separated with a bar. The other way is with array syntax validation rules where you can…

Speaker names come from our own diarization. The position is estimated from where the line sits in the episode.

More from Laravel News Podcast