PHP patches 2 critical remote-code flaws

Fixed builds are 8.2.35, 8.3.36, 8.4.27 and 8.5.12. PHP powers a large share of websites, so operators on older builds stay exposed until they update; OpenAI says AI-assisted research found the bugs.