php vulnerabilities: time to clarify what really happened
here's my conversation with derick rethans, a member of php internals. we go through the full timeline and the facts
watch here: https://youtu.be/5X5csEbmHqs?si=uAk74DG704DBWN0q
Commit
3ac7547
Much needed, there was so much noise on X about this one (CVSS 10, actively exploited…). TL;DR for anyone skimming: update to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, there's no mitigation besides patching 🔐
commit 3ac7547