Code:
Name: KyenoNov26
Term: 1 Cycle
Cycle Amnt: 6,675
Total Amnt: 6,675
Author: Liquid369
Receiver: KyenoAddress: DREvgrkYQGwGN32ScRgpyMmWbnTwVEJDFg
Created: 11-02-2026
Status: Pre-Proposal
Vote Hash: 1e2326ef6c5eb258ed26bdb85259cabc9f80ccaea18afbab95be93c6212bfaf8KyenoNov26
On 2026-10-20 PHP announced a critical security release for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (Qualys advisory). PIVX.org runs on PHP. Kyeno backported both fixes to the end-of-life PHP 7.4.33 and 5.4.45 releases, which get no upstream patches, and patched the PIVX.org website. He did it within two days of the advisory.
The patches are public, so anyone can review them: kyeno/legacy-build-fixes/php (CVE commit 355580e, 2026-10-22).
The work is done and the fix is already live; this proposal pays for it after the fact. $250 is well below what an outside contractor would charge for an emergency patch.
The address is going to me, and I will send to Kyeno once paid out.
The number
0.0377/PIV (CoinGecko, 2026-11-02) is 6,625 PIV, plus 50 PIV reimbursing the submission fee: 6,675 PIV, one cycle.
Voting
GUI Wallet: DAO page → vote "yes" on KyenoNov26
Console:
Code:
mnbudgetvote many 1e2326ef6c5eb258ed26bdb85259cabc9f80ccaea18afbab95be93c6212bfaf8 yes
Code:
mnbudgetvote many 1e2326ef6c5eb258ed26bdb85259cabc9f80ccaea18afbab95be93c6212bfaf8 no