On the evening of October 20, PHP developers informed the public about upcoming security vulnerability disclosures and fixes. Since a large proportion of our customers use PHP on our platform, the Zone team closely monitored developments from that moment on. Even before the security patches were released, we implemented technical measures to mitigate the risks associated with these vulnerabilities. As soon as the developers released the patched versions, we deployed them immediately. This also included patching older PHP versions (5.6–8.1), which are no longer supported by the PHP developers but which Zone continues to maintain for its customers.
Thanks to our team’s professionalism and experience, we managed to complete the entire process without having to proactively suspend any services or take any customer websites offline.
If your website or application uses a Zone-managed web hosting service (including Managed CloudServer or Managed Dedicated Server), the necessary security patches have already been applied. You don’t need to take any action.
If you host your website using a Zone service without management or a managed platform, such as Cloud Server VPS or Dedicated Server, you are responsible for installing and maintaining the software yourself. By default, we don’t even know whether you’re running PHP on these servers, so you’ll need to update it yourself. As a precaution, we sent a reminder to these customers yesterday.
Our goal is clear: to do everything we can to keep websites and applications secure and accessible, even when unexpected situations arise and require a rapid response.
A big thank you to our technical team for their swift and professional response, and to the customers who were affected by the risk mitigation measures for their patience and understanding.
