MS-ISAC Releases Advisory on PHP Vulnerabilities

[Carmel NY]

MS-ISAC Releases Advisory on PHP Vulnerabilities

The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released
an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities. An
attacker could exploit one of these vulnerabilities to take control of an
affected system.

https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-php-could-allow-for-arbitrary-code-execution_2018-101/

Will or does this affect the versions of PHP in the FreeBSD ports system? The
latest version in ports is 7.2.10 as far as I can tell. Perhaps it is time to
retire the older version and promote 7.2.10 as the default PHP version?

Just my 2¢

-- 
Carmel