PHP released urgent updates for two major vulnerabilities affecting web-facing installations running since version 5 in 2004.

Official patches are limited to versions 8.2 and newer.

Which systems are affected?

The problems affect almost all PHP installations that accept requests from the internet, starting with versions from 2004. However, official fixes have been released exclusively for versions 8.2 and later.

Attack attempts and preventive measures

Cloudflare said it had detected early attacks in progress even before details of the problems were made public.…