PHP2Shell: patching is easy, knowing where to patch isn't
On 21 October the PHP project released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two vulnerabilities that, within days, got the name PHP2Shell. They are flaws in the interpreter itself, not in a framework or a CMS, so they affect any PHP installation that serves web requests.