Comment by charcircuit

Why does the PHP security team need to acknowledge it and develop the fix? It's open source software.