Hi

Sorry for the back to back email. This is important. Yesterday evening news got leaked of two major security issues in PHP, affecting all versions. The Foundation team was already working on a fix, which was planned to be released tomorrow. Because of the leak though, work sped up and the patched versions will be released later today (14:00 UTC, if all goes well).

A handful of workarounds have been circling around the internet, from firewall rules to changing ini settings, none have proven to be 100% effective, and several proof of concepts of working hacks have already spread online.

The best solution is to take your PHP websites offline and patch as soon as the updates are available later today.

I'll keep you posted later today or tomorrow when there's more news; don't hesitate to reply with thoughts.

Best of luck.

Brent