What the PHP2Shell rumors got wrong, from inside the PHP security team
- PHP: 10 events in the last 90 days
- Previous: earlier the same day · Websites warned to install critical PHP software update or go offline
What happened
The PHP2Shell leak got the severity right and most details wrong: an out-of-memory error turned into RCE, and the real stopgap went unmentioned.
Summary assembled by rule from the sources below