From Newsgroup: alt.comp.os.windows-11

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities
that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.

This has been in the news and so expect hackers trying their luck! <https://www.php.net/archive/2026.php#2026-10-21-5>

BBC Link:
<https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o>

OpenAI: <https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/>




--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

On 2026/10/22 5:27:50, MegaNZ wrote:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities
that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.

This has been in the news and so expect hackers trying their luck! <https://www.php.net/archive/2026.php#2026-10-21-5>

BBC Link:
<https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o>

OpenAI: <https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/>

Yes, I've seen and heard the news reports. (You'd have to be fairly dead
not to!)
First time I'd ever heard of PHP.

How do I know if I'm a "PHP user" or not?
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G()ALIS-Ch++(p)Ar++T+H+Sh0!:`)DNAf

Socrates felt that the invention of writing would atrophy our brains
because we wouldn't have to remember anything if we wrote it down
--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

On 22/10/2026 in message <11bd22h$s6f5$1@dont-email.me> J. P. Gilliver
wrote:

On 2026/10/22 5:27:50, MegaNZ wrote:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities
that can allow unauthenticated remote code execution. All PHP users are >>strongly encouraged to update immediately.

This has been in the news and so expect hackers trying their luck! >><https://www.php.net/archive/2026.php#2026-10-21-5>

BBC Link:
<https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o>

OpenAI: >><https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/>

Yes, I've seen and heard the news reports. (You'd have to be fairly dead
not to!)
First time I'd ever heard of PHP.

How do I know if I'm a "PHP user" or not?

Do you have a website?
--
Jeff Gaines Dorset UK
That's an amazing invention but who would ever want to use one of them? (President Hayes speaking to Alexander Graham Bell on the invention of the telephone)
--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

On 2026/10/22 14:24:51, Jeff Gaines wrote:

On 22/10/2026 in message <11bd22h$s6f5$1@dont-email.me> J. P. Gilliver wrote:

On 2026/10/22 5:27:50, MegaNZ wrote:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities
that can allow unauthenticated remote code execution. All PHP users are
strongly encouraged to update immediately.

This has been in the news and so expect hackers trying their luck!
<https://www.php.net/archive/2026.php#2026-10-21-5>

BBC Link:
<https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o>

OpenAI:
<https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/>

Yes, I've seen and heard the news reports. (You'd have to be fairly dead
not to!)
First time I'd ever heard of PHP.

How do I know if I'm a "PHP user" or not?

Do you have a website?

Yes - hand-coded in HTML 3, and not touched for several years!
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G()ALIS-Ch++(p)Ar++T+H+Sh0!:`)DNAf

A good pun is its own reword.
--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

Op 22-10-2026 om 15:11 schreef J. P. Gilliver:

First time I'd ever heard of PHP.

How do I know if I'm a "PHP user" or not?

You're not, not likely if you don't know what it is.

If anyone, your hosting provider should fix it, not you.
--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

"J. P. Gilliver" wrote:

How do I know if I'm a "PHP user" or not?

have you got a wordpress site, or a blog?

--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

On 22/10/2026 in message <11bd3tc$su8p$1@dont-email.me> J. P. Gilliver
wrote:

On 2026/10/22 14:24:51, Jeff Gaines wrote:

On 22/10/2026 in message <11bd22h$s6f5$1@dont-email.me> J. P. Gilliver >>wrote:

On 2026/10/22 5:27:50, MegaNZ wrote:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities >>>>that can allow unauthenticated remote code execution. All PHP users are >>>>strongly encouraged to update immediately.

This has been in the news and so expect hackers trying their luck! >>>><https://www.php.net/archive/2026.php#2026-10-21-5>

BBC Link:
<https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o>

OpenAI: >>>><https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/>

Yes, I've seen and heard the news reports. (You'd have to be fairly dead >>>not to!)
First time I'd ever heard of PHP.

How do I know if I'm a "PHP user" or not?

Do you have a website?

Yes - hand-coded in HTML 3, and not touched for several years!

Then you presumably know if it uses PHP or not?
--
Jeff Gaines Dorset UK
That's an amazing invention but who would ever want to use one of them? (President Hayes speaking to Alexander Graham Bell on the invention of the telephone)
--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

On 10/22/2026 9:11 AM, J. P. Gilliver wrote:

On 2026/10/22 5:27:50, MegaNZ wrote:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities
that can allow unauthenticated remote code execution. All PHP users are
strongly encouraged to update immediately.

This has been in the news and so expect hackers trying their luck!
<https://www.php.net/archive/2026.php#2026-10-21-5>

BBC Link:
<https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o>

OpenAI:
<https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/>

Yes, I've seen and heard the news reports. (You'd have to be fairly dead
not to!)
First time I'd ever heard of PHP.

How do I know if I'm a "PHP user" or not?

The op's post on the PHP is pretty much useless for those reading the
Win11 and Win10 group.

The PHP vulnerability is about an attack on affected web servers.
Servers running PHP are the exploit target.

i.e. You unlikely have zero internet-facing devices and services under
'your control' that are reliant on PHP(hypertext pre-processor
programming language) that runs directly on web servers which operates entirely behind the scenes on the hosting server.


Bottom line...ignore the op's post and pretty much every other
response(beside this one) received in this thread.
--
...w¡ñ§±¤ñ
--- Synchronet 3.21d-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

On Thu, 10/22/2026 9:11 AM, J. P. Gilliver wrote:

On 2026/10/22 5:27:50, MegaNZ wrote:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities
that can allow unauthenticated remote code execution. All PHP users are
strongly encouraged to update immediately.

This has been in the news and so expect hackers trying their luck!
<https://www.php.net/archive/2026.php#2026-10-21-5>

BBC Link:
<https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o>

OpenAI:
<https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/>

Yes, I've seen and heard the news reports. (You'd have to be fairly dead
not to!)
First time I'd ever heard of PHP.

How do I know if I'm a "PHP user" or not?

There are lots more Web Server designs. This reference
is just because the discussion of the issue was using
the term WAMP (because of php.exe or php-win.exe)


<------------------ Web server --------------> Web client (your browser)
HTML, Javascript, Java,
Ingredients Acronym Silverlight, Adobe Flash, ActiveX
----------- ------------ Client Side Interpreters
Linux or Windows LAMP or WAMP
Apache
MariaDB or MySQL
Perl, PHP, or Python
for the programming language

A web server can run on a desktop computer.
On Linux, CUPS is a web server that presents a print dialog.
It is at localhost:631 or 127.0.0.1:631 . Web servers
might "normally" be at Port 80 (where we don't enter the
port number as that's the default port). The port in the past
was also set to :8080 for some purpose. The 631 value is likely
allocated for that specific purpose (port is registered as such),
rather than "being grabbed" for the job.

The warning then, is mainly for Web Server operators. But
that does not completely eliminate the use of obfuscated
web servers used for UI purposes, locally.

Basically, if a software product was delivered to you with
PHP in it, the "update/upgrade strategy" for the product
would be aggressive and a new version would already have
been pushed out to you. If you ignored the product
warning that "you should remove this version because
it is obsolete and not getting any more updates", then
it's on you to follow the instructions and remove the material.

If you knew something technically about the design, maybe
you wouldn't even bother installing it in the first place :-)
Rickety go-carts are a dime a dozen.

Paul
--- Synchronet 3.21d-Linux NewsLink 1.2