Update 10:15am
Our hosting company have clarified the position and ALL OUR SERVERS ARE NOW PATCHED.
“We are continuing to deploy upstream security patches across our hosting platforms.
Please note that in some cases, vendors backported these urgent fixes to the current version, meaning the PHP version number may not have changed.”
We’re confirmed this on a number of sites, with the PHP builds having been updated yesterday.
We’re working through a list of all our sites running pre-PHP8.2 and we’ll contact those clients if action needs to be taken.
Update 8:25am
We’re aware of the recent news about vulnerabilities being detected in the web software PHP. All our servers are managed and our hosting provider is currently in the process of installing patches across its network. We’ll keep this page updated once we know our own servers have been patched and we’ll be reviewing all client hosted accounts for any still running on PHP versions before 8.2, as these won’t be patched so those sites will need to be updated to run on the patched versions.