Leak forces PHP to ship fixes for 14-year-old PHP2Shell bug a day early

PHP shipped fixes for two critical PHP2Shell flaws a day early after a leak. The 14-year-old bug lets attackers run code on unpatched servers.