The PHP Foundation says its patches for the RCE vulnerabilities are limited to PHP 8.2 and newer, leaving legacy deployments dependent on third-party vendors (Wired)

Wired:
The PHP Foundation says its patches for the RCE vulnerabilities are limited to PHP 8.2 and newer, leaving legacy deployments dependent on third-party vendors  —  The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites.

from Techmeme https://ift.tt/ZtujdSf