AWS Calls a PHP RCE "Important" While Amazon Linux 2023 Users Wait Weeks for a Patch
AWS rates PHP RCE as Important so Amazon Linux 2023 patch may take 20 days
Two critical PHP CVEs affecting branches 8.2 through 8.5 let unauthenticated attackers crash worker processes. Amazon confirmed it is aware and working on a fix, but users on Amazon Linux 2023 are stuck waiting. A maintainer defended the timeline by noting a prior Nginx CVE took 20 days, not a month, and was only rated Important. Customers called the response unacceptable and some rebuilt PHP themselves.
I wouldn't mix topics here and spread misinformation — maybe, and I might be being crazy here, rather than suggesting people are spreading misinformation you (Amazon) could actually announce some information instead of leaving everyone in the dark.