Disclosure is scheduled at 14:00 UTC with attacks expected to follow soon after.
It is adviced to take offline every non-vital services until the patch has been installed (or the Docker image has been updated with a patched PHP)
Disclosure is scheduled at 14:00 UTC with attacks expected to follow soon after.
It is adviced to take offline every non-vital services until the patch has been installed (or the Docker image has been updated with a patched PHP)
I wonder how many docker containers keep their own version of PHP…
I can tell you that every docker container we had running was vulnerable, and none had new versions as of around noon today.
The manual fix is relatively easy, just change a few configs.