PHP patches released for two critical RCEs

T1Covered by 1 source · first reported by LWN.net at 21 Oct, 13:53 UTC

The PHP project has published PHP versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address two critical vulnerabilities that could allow unauthenticated remote code execution. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and…