PHP plans October 21 security updates for two critical flaws

The PHP security team is urging administrators to prepare for emergency patches. Both vulnerabilities carry CVSS v4.0 scores of 9.2, and affected and fixed versions will be identified with the release, according to RuntimeWire. Information about the flaws reportedly leaked before their scheduled disclosure, according to BleepingComputer.

Covered by 2 publishers within 2 hours of the first report.

• RuntimeWire: PHP schedules critical security release for two vulnerabilities on October 21st
• Latest 4:56 PM ET BleepingComputer: PHP warns admins of two critical flaws, emergency patches coming tomorrow

Reporting2

RTW RuntimeWire PHP schedules critical security release for two vulnerabilities on October 21st · Ryan Merket 3:08 PM

BC BleepingComputer PHP warns admins of two critical flaws, emergency patches coming tomorrow · Lawrence Abrams 4:56 PM

Related

CSN Drupal issues security updates for critical code execution flaw October 19

SW F5 and Juniper Networks release fixes for critical security flaws October 15