Post

Can't understand why the PHP maintainers scheduled a security update about a vulnerability that was leaked and then was actively being exploited I'm pretty sure as one of the biggest technologies in the web, you could've you know, released a patch quickly

Unfortunately it takes time to get the patches packaged across all the different distros, and once it's released anywhere, everyone knows what the vuln is and can exploit it. It was supposed to be a coordinated release but it was leaked and the embargo was broken…

When it was leaked, instead of scheduling the important update they should've released it as quickly as possible instead of forcing people to wait hours for it and allowing exploits to be developed faster than the update