BSI IT security notice
Functional impairments or outages may occur
Timeline
-
The security updates required because of the critical PHP vulnerabilities reported by the BSI have been successfully installed on our affected hosting systems.
This also includes the older PHP versions 7.4, 8.0 and 8.1, for which corresponding security updates have been made available.
The temporary restrictions on access to the Plesk administration interfaces have already been lifted. All regular administration functions are available again.
The extraordinary security measures are now complete.
We continue to recommend that our customers migrate older PHP versions to a currently supported version and regularly check that their applications and the extensions they use are up to date and secure.
-
The Plesk interface is available again.
-
Updates have now also been made available and installed for PHP versions 7.4, 8.0 and 8.1 (end of life).
-
As no patch is currently available for the Plesk interface yet, we have temporarily blocked external access.
-
The updates for PHP versions 8.2, 8.3, 8.4 and 8.5 have been successfully installed.
Original notice
The German Federal Office for Information Security (BSI) is warning of critical security vulnerabilities in PHP that may allow malicious code to be executed on affected web servers.
PHP builds of versions 7.4, 8.0, 8.1, 8.2, 8.3, 8.4 and 8.5 are available for Plesk. Versions 7.4, 8.0 and 8.1 have already reached end of life. Regular security updates can therefore generally not be assumed for these versions. Whether a security update is available for an older PHP version in a specific case depends on the respective Plesk build and on the updates provided by the vendor or the distribution.
We will check whether a corresponding security build is available for the PHP version you use. If this is not the case, the PHP version must be upgraded to at least PHP 8.2 so that the required security updates can be applied. This measure is mandatory for security reasons and cannot be postponed.
Please note that an upgrade, in particular to PHP 8.2 or higher, may lead to incompatibilities or functional impairments of your applications, plugins, extensions and interfaces. Checking compatibility and making any necessary adjustments to your applications is your responsibility. We accept no responsibility for any resulting impairments, outages or adjustment work.
We will carry out the necessary measures without separately agreeing a maintenance window.
What can we do for you?
Speak directly to our team in Düsseldorf – by phone, by email or via our contact form.