The PHP-related service update has been completed successfully. The maintenance period has concluded, and services are now operating normally. Our team has completed the necessary checks, and no further interruptions are expected at this time. If you have any questions or experience any concerns, please don't hesitate to contact us.

Patches from upstream vendors have been released and have been deployed across our servers. All versions from PHP 5.6 to 8.5 have been patched. Please note the version number for PHP 8.1 and below may not have increased due to fixes being urgently backported. You can verify the patch status by checking that the Build Date from a phpinfo() shows as October 21st or later. We have now removed the mitigations we put in place. Throughout this event our teams worked directly with major providers and we deployed many mitigations in advance of public announcements in order to protect all our customers' operations. The nature of our platform allowed us to make changes directly in Nginx, before PHP was reached, fully protecting our customers from some of the possible exploit routes. Summarising the changes made on the platform: - Multipart uploads have been re-enabled. Due to the nature of the exploit, limiting this was the only way to protect malicious PHP executions. - We also reduced limits on concurrent PHP workers as one of the bugs was caused effectively by a race condition. These limits have now been removed. - We disabled the PHP upload progress system. If you use this, we can re-enable on request however for security we strongly recommend leaving this rare feature disabled. If you are experiencing any problems or have any questions please contact us for assistance.