Post

If you self-host and run PHP on it (which is very likely) you NEED to update it later today, ASAP. A major vulnerability that affects PHP versions since 5 has been found, which allows remote code execution (very bad). You MUST retweet and share with friends who self-host. THIS IS CRITICAL. ⚠️

ETA for an update is Wednesday, October 21 at 14:00 UTC. If you don't understand what all this means, or if it affects your site, ask a technical friend who can help. You CANNOT afford to leave this unattended. Even if I am blowing this out of proportion, the risk is there and not worth ignoring.

Just in case anyone wants to subtweet, come into my replies, or QRT saying that I'm overreacting or sensationalising; when CERT themselves are saying "take it off the internet until you can patch it," that should tell you how serious this is. There have already been reports of it being exploited.