CERT-EU - Critical Vulnerabilities in PHP this was just published today. Is there any advice on what to do right now to avoid exposing MIAB’s php-based services until we understand the patching/update requirements? Is it just roundcube that is affected?
for now i’ve just blocked port 80 and 443 on the server, i figure a few days of no webmail and no personal (static) website won’t hurt anybody. nobody reads my personal site anyways 