Maximum safety.
Proactively protected.
In response to a recently disclosed PHP security vulnerability , we have comprehensively updated all our server systems yesterday after 16:00 as a precautionary measure.
Security patches successfully installed
All updates were carried out smoothly. Your systems and data were and are fully protected at all times and available without downtime.
01 What has been done?
In order to react immediately to the known vulnerability in PHP, our team of administrators provided all servers with the latest security patches yesterday between 4 and 6 p.m.
Particularly important for our holistic security strategy: We have not only updated systems on which PHP is actively used. All web servers that do not use PHP themselves have also been updated in a targeted manner. In this way, we consistently exclude potential side effects or cross-connections at the system level from the outset.
02 The measures at a glance
-
01
PHP server patched
All servers running PHP applications have been updated to the corrected and protected versions.
-
02
Proactive protection for non-PHP servers
Even pure web servers without PHP use have been equipped with the latest system updates as a precautionary measure to guarantee the overall security of the infrastructure.
-
03
Uninterrupted operation
The installation of the updates went without any impairments or noticeable interruptions for your ongoing services.
-
04
Continuous monitoring
Our systems will continue to be monitored around the clock in order to be able to react immediately to new security messages.
03 System Status in Comparison
| Area | Before the update (yesterday < 6pm) | After the update (current) |
|---|---|---|
| PHP Server | Potentially at risk | Fully Patched & Protected |
| Web server without PHP | Unknown residual risk | Updated & hardened as a precaution |
| Infrastructure Status | Standard Monitoring | Enhanced security testing |
| Need for action for you | None | None (All done) |
04 What does this mean for you?
- No action is required on your part – all protective measures have been carried out centrally.
- Your applications and data are fully secured.
- The precautionary update of all non-PHP servers has also achieved the highest possible level of security for the entire environment.
]]>