PHP released a security update. The most severe vulnerability could allow attackers to run RCE remote code in application permissions on the server.

Vulnerable versions that require updating:

7.2 to before 7.2.11
7.1 to before 7.1.23

Link to update – http://www.php.net/downloads.php

It is recommended that you check the update on your systems before installing in production environments.