PHP notifies the community of two critical RCE flaws, says patch is coming imminently.