PHP Vulnerability

We have just been alerted to a serious vulnerability issue on PHP. The full details are not yet known, but will be revealed today at 14:00 UTC, along with an update to fix them. A number of our websites, including Webmail, run using PHP at the back end, so we will be working as quickly as possible to upgrade them, which might involve a short outage or two as we move through the various servers.

We may have to put protections in place, which would have the effect of breaking uploads, if we can’t get the fix in place quickly, as it’s predicted that within 15 minutes of the information becoming public, then attacks might begin.

There’s more information on the BBC News Website.

Fixes are now in place on the Webmail servers – working one by one through all the other affected servers.

All servers in our control were patched or protected within an hour of the patch becoming available.