The PHP project released security updates on October 21 for two vulnerabilities that can permit unauthenticated remote code execution under affected conditions.
Its advisory identifies PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 as fixed releases. Distribution vendors may provide backported fixes. This report describes the vendor advisory and does not establish that any particular website has been compromised.
Sources & references
See an error? Request a correction.
