AWS rates PHP RCE as Important so Amazon Linux 2023 patch may take 20 days
The Amazon Linux 2023 patch may take 20 days to be released following an Important rating from AWS for a PHP Remote Code Execution (RCE) vulnerability. A patch for the vulnerability is already available in the php7 repo, but it needs to be included in the Amazon Linux 2023 package. The issue is tracked on GitHub at https://github.com/amazonlinux/amazon-linux-2023/issues/1148. A discussion about the issue is ongoing on Hacker News at https://news.ycombinator.com/item?id=50187708.
Read the full article at github.com →