PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out

PHP released critical security updates (versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35) to fix two remote code execution vulnerabilities that allow unauthenticated attackers to execute code on affected servers. All PHP users are strongly urged to update immediately, particularly those running mod_php, as the vulnerabilities exploit out-of-memory handling and stale global state issues in request processing. PHP 8.1 and older versions no longer receive official updates, though the security team provided minimal backports for versions 7.4, 8.0, and 8.1 to assist users unable to upgrade immediately.