WORLDTECHGoogle Cloud urges PHP users to upgrade after critical code to be run remotely flaws
Google Cloud has issued urgent patch guidance for critical remote code execution vulnerabilities in PHP, the widely used server-side scripting language. Customers running PHP on Google Cloud Platform are advised to move to version 8.2 or newer and redeploy their applications without delay.
What customers are being asked to do
The guidance is directed at organisations that run PHP on Google Cloud Platform. According to the reporting, the company recommends upgrading to PHP 8.2 or a later release and then redeploying affected applications immediately.
The vulnerabilities concern remote code execution, a class of flaw that allows an attacker to run programs on a machine from a remote location.
Background on the company issuing the advice
The guidance comes from Google, an Internet and software company based in Mountain View that was founded in 1998.
Open questions
- Which specific PHP versions are affected by the vulnerabilities?