PHP vulnerabilities

Two high-severity vulnerabilities affecting PHP have been reported which allow for remote code execution as reported by PHP.

Those of ISNIC's services which were affected by these vulnerabilities were taken offline before the patch was released due to signs of exploitation attempts in the wild. This included ISNIC's website.

All of ISNIC's services were restored after PHP had been updated to a secure version system-wide at 14:12.

DNS service for .is was not affected by this vulnerability and remained operational during these events.