This one claims to actually be an exploit. The other was an announcement from PHP without details.