Critical PHP Fixes Put Crypto Checkout Infrastructure In Focus

TL;DR: PHP released fixes for two critical flaws on October 21 and urged immediate updates. Crypto businesses using PHP-based web infrastructure should check that layer of their systems; the advisory does not announce a breach of Bitcoin or BTCPay Server itself. Security work for a crypto business does not end at its wallet. A critical PHP update has put ordinary web-server software back on the operational agenda. The PHP project’s October 21 advisory identifies two vulnerabilities that can allow unauthenticated remote code execution. Fixed upstream releases are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. The project strongly encourages affected users to update immediately. It says installations serving web requests are at risk and highlights the Apache mod_php configuration as particularly exposed.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to NewsBTC.