NSA Urges PHP Users to Patch or Take Systems Offline

PHP has released fixes for two flaws rated 9.2 that can let unauthenticated attackers run code on web servers.