Two critical flaws in PHP, emergency patches: AI found them first

Ce sont des chercheurs en sécurité utilisant l’IA qui les ont trouvées en premier.

Être in the present is est for a singular subject and sont for a plural one. It describes nature, state or place (“is”, “is located”). If what follows (the attribute) is a noun, adjective or prepositional phrase, it is not a passive. If a past participle follows, it is a passive (est annoncé). Headlines and summaries often use the present to describe the current situation.

Deux failles critiques dans PHP, correctifs d’urgence : l’IA les a trouvées en premier

The passé composé is the most common past tense, used for “did” and “has done” — actions completed in the past. It is formed with the auxiliary avoir (a / ont…) in the present + a past participle. Past participles of -er verbs end in -é (annoncer → annoncé); learn the irregular ones (faire → fait, prendre → pris, voir → vu). In the negative, ne … pas wraps the auxiliary (n’a pas annoncé). In the news it reports facts that have already happened, such as “announced” or “voted”.

Wiz avertit que les LLM aident à adapter un exploit aux versions, configurations et dispositions mémoire de PHP, rendant exploitables des failles auparavant trop difficiles.

The imparfait describes states, background, habits and actions in progress in the past (il était, elle avait, ils pensaient). Take the nous form of the present, drop -ons, and add -ais / -ais / -ait / -ions / -iez / -aient. If the passé composé gives “the event itself”, the imparfait paints “the situation at the time”.

D’après les comptes rendus, un attaquant sans compte pourrait faire exécuter du code sur un serveur web.

The conditional expresses possibility, supposition, unconfirmed information and polite requests (“would”, “might”). It uses the same stem as the future and the same endings as the imparfait (-ais, -ait, -ions, -iez, -aient): pouvoir → il pourrait. In the news it is used to avoid asserting, as in “is reported to…” or “there is a possibility…”.

Les failles existent dans la plupart des versions depuis PHP 5 (2004) ; PHP 8.1 et antérieures ne sont plus supportées.

The passive means “is done” or “is being done”. It is formed with être + past participle, which agrees with the subject in gender and number (la mesure est adoptée / les mesures sont adoptées). The agent is introduced by par (or de). In the news it is common when the event, rather than the actor, is the focus (est prévu / est annoncé / est connu).

Deux failles critiques ont été trouvées dans PHP, utilisé par environ 70 % des sites web : quel danger et que faire.

The past passive means “was done”. Its form is present of avoir + été (past participle of être) + past participle. Été does not change, but the last participle agrees with the subject in gender and number (la loi a été votée / les textes ont été votés). It is frequent in news reporting results such as votes, decisions and announcements.

Les détails (numéros de failles, versions corrigées) varient selon les comptes rendus ; consultez l’avis officiel de PHP.

The imperative expresses commands, requests and advice. It has no subject: the sentence starts with the verb (Consultez les informations.). The vous form ends in -ez, nous in -ons (Restons prudents.), and tu in -e for -er verbs (Consulte). It is very common in notices and warnings (Vérifiez, Consultez, Restez informé).

Les failles existent dans la plupart des versions depuis PHP 5 (2004) ; PHP 8.1 et antérieures ne sont plus supportées.

Normally ne and pas wrap the verb. Before a vowel, ne becomes n’. Check which part of the sentence the negation covers. Ne … plus means “no longer”.

PHP fait tourner environ 70 % des sites selon W3Techs, soit plus de 33 millions de sites potentiellement concernés.

Selon means “according to”. Put a person or organisation after it as the source. It separates facts the writer checked directly from what another body or report said. Citing a source does not turn a forecast into an accomplished fact.

D’après les comptes rendus, un attaquant sans compte pourrait faire exécuter du code sur un serveur web.

Put a base-form verb after pouvoir. Peut means “can” or “may”; the conditional pourrait gives a more reserved possibility, “might”. It does not necessarily mean implementation is settled.

PHPは、W3Techsによると、ウェブサイトの約7割で使われ、3,300万を超えるサイトが対象になりうるとされます。

As in “LCPによると”, it shows where the information comes from. What that source reported follows. It is used differently from “私にとって”, which gives one’s own opinion.

WordPressは、この欠陥は、WordPressだけの問題ではないので、サイトの持ち主が、サーバーを更新し、ホスティング会社と連絡をとる必要があると説明しています。

They negate a noun and similar content. “ではありません” is the polite form and “ではない” the plain form. “成立ではありません” shows that it cannot be said to have been concluded.

OpenAIは、攻撃者より先に見つけたため、悪用された例は、確認されていないとしています。

ため is used for both reason and purpose. “成立ではないため” is a reason and “運転手を守るため” a purpose. Decide from the whole sentence whether what precedes is a cause or a goal.

「PHP」は、ウェブサイトを作るためのプログラミング言語で、ブログのWordPressなども、これで動いています。

“暴言など” gives “abusive language” as one example. It is not necessarily a closed list of only the things named. It also helps when reading the scope of a news story.

世界のウェブサイトの約7割が使うPHPで、重大な欠陥が見つかりました。

In “発表しました”, ました makes a verb polite past. The negative is “ませんでした”. Read the actual date together with the date and time in the text.

この欠陥があると、アカウントを持たない攻撃者が、ウェブサーバーで、自分のプログラムを動かせるとされています。

と takes the content that is reported or explained. In “改定する方針だと報じました”, “改定する方針だ” is what the report said. Separating the content from who said it and how makes long sentences easier to read.