Hi, I would like to post the following news item, once the fixes are released later this afternoon:
``` PHP versions prior to X and Y are affected by [CVE-2026-109618](https://www.cve.org/CVERecord?id=CVE-2026-109618) and [CVE-2026-109619](https://www.cve.org/CVERecord?id=CVE-2026-109619), which allow for remote code execution. For any system publicly exposing a PHP application with the help of a prior version of PHP, we urge users to immediately upgrade their systems to the latest available version of PHP (php >= X and php-legacy >= Y). ``` Please add any wording changes/suggestions to this hedgedoc: https://md.archlinux.org/ukkx2AjbT2-wk-X70ZC1BQ?view Best, David
signature.asc
Description: PGP signature
