We regret to inform you that today at 1:30 PM Madrid time, we will take all our SaaS instances offline due to an extremely rare exploit confirmed by PHP (announcement). We will keep them offline until a fix is released and we have updated our systems. We hope this will take only a few hours.
We have dealt with remote exploits in PHP before, but those affected only very specific modules that we do not use in our software. This time, the exploit apparently affects almost all PHP environments. As it has not yet been fully disclosed, we believe the best course of action is to take all SaaS services offline.
Our plan is:
- SaaS instances will go offline at 1:30 PM Madrid time.
- PHP.ORG is expected to release a fix at 4:00 PM Madrid time.
- We will immediately deploy the fix to all SaaS customers. We expect services to be back up within a few hours.
- Once the SaaS upgrade is complete, we will update all on-premise installations (Community and Enterprise) packages and make them available for download for all the community.
- We will also update other systems we use to manage the project.
We will post updates in this forum thread as the situation develops. Please do not contact Eramba Support, as the team will be very busy. If you want your SaaS instance to remain online despite this situation, we can arrange that because each customer’s instance is isolated. However, we strongly advise against it.