Japan's internal affairs minister urges prompt PHP updates over a serious flaw
Original title：���䑍����b�t�c��L�҉�̊T�v
What happened
At a press conference, Japan's internal affairs minister urged prompt updates for a serious PHP flaw whose fix was released late on October 21. If abused, it could let outsiders run unauthorized programs and take sites down; the source text is garbled, so details are unconfirmed.
Who is affected
- Anyone running a PHP-based website
- Anyone on an end-of-support PHP version
What to do
Check your PHP version and apply the fixed release as soon as possible. If you run an end-of-support version, move to a supported one.
About this policy
- Jurisdiction
- Japan · 総務省
- Who it applies to
- Businesses operating PHP-based websites
Guidance
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| PHP | 要確認 | 要確認 |
Why this flag
外部から不正なプログラムを実行されるおそれのある深刻な脆弱性で、大臣が速やかな更新を呼びかけているため。ただし悪用の確認は原文に記載がなく、原文が文字化けしているため要確認。
Double yellow: great danger, be ready to stop — Severe impact with a public exploit or reported (unconfirmed) exploitation, including RED candidates under review.
Sources
- Primary source：総務省 報道資料 ↗