{"id":50175064,"user":"jamesfinlayson","time":1792547129,"time_ago":"a day ago","type":"comment","content":"

No hints as to what versions are affected?","comments":[{"id":50175095,"user":"gnabgib","time":1792547496,"time_ago":"a day ago","type":"comment","content":"

> These vulnerabilities could affect all PHP versions from PHP 5 onwards

https://cert.europa.eu/publications/security-advisories/2026...

> affect PHP versions 5, 6, 7, and 8.

https://www.bleepingcomputer.com/news/security/php-warns-adm... (which references HN as a source - https://news.ycombinator.com/item?id=50167754)","comments":[{"id":50175631,"user":"Operyl","time":1792552372,"time_ago":"a day ago","type":"comment","content":"

I love the "affects PHP... 6" given we never had an official 6 release haha.","comments":[{"id":50175653,"user":"gnabgib","time":1792552576,"time_ago":"a day ago","type":"comment","content":"

Yeah.. their text (unedited).. Maybe they meant 5.6? Only 8.x is "supported" currently, though. I wonder how 3&4 avoided it :)","comments":[{"id":50175835,"user":"cesarb","time":1792554229,"time_ago":"a day ago","type":"comment","content":"

> I wonder how 3&4 avoided it :)

Probably the same way log4j 1.x avoided log4shell: the vulnerable code was introduced on a later release.","comments":[],"comments_count":0,"level":3,"url":"item?id=50175835"},{"id":50177544,"user":"Perz1val","time":1792570594,"time_ago":"18 hours ago","type":"comment","content":"

A: I'm writing a post, what versions

B: "5.6, 7, 8“

A: fixes a "typo" ok so "5, 6, 7, 8"","comments":[],"comments_count":0,"level":3,"url":"item?id=50177544"}],"comments_count":2,"level":2,"url":"item?id=50175653"}],"comments_count":3,"level":1,"url":"item?id=50175631"}],"comments_count":4,"level":0,"url":"item?id=50175095"}],"comments_count":5,"url":"item?id=50175064"}

Comment by jamesfinlayson