PHP的安全弱点(CVE-2026-109618和CVE-2026-109619)
- monitoring
我们知道PHP有两个安全弱点,编程语言Officepro建立在CVE-2026-109618和CVE-2026-109619的基础上. PHP已安排于UTC下午14:00(15:00 BST)于10月21日(即今日)举行安全发布会,预计会修好. - 我们正准备在PHP的定律 发布后立即应用到Oppro Cloud上。 - 如果你自己担任主管,我们将分享在PHP的修复后更新的指导。 有问题请联系支援组.
- monitoring
额外的网络应用防火墙规则现在正在Officepro Cloud上活动. 我们的网络提供者针对这些报告发布了这些报告,我们正在确认这些报告如所期望的那样发挥作用。 PHP的安全发布时间仍定于UTC下午14:00(15:00 BST)今天. 一旦它出来,我们将建立,测试和推出更新的 Deskpro Cloud发布。 这将需要几个小时,我们将在这里张贴 当推出开始。 如果您自己担任主机( DPC) , 我们将会在 PHP 的修复可用后共享引导 .
- monitoring
作为预防措施,正根据联合王国国家网络安全中心(NCSC)的指导暂时下线。 https://www.ncsc.gov.uk/news/critical-security-issue-fecting-php 互联网档案馆的存檔,存档日期2013-12-22
- monitoring
更正 : PHP发布了针对CVE-2026-109618和CVE-2026-109619这两个关键弱点的解决方案. 他们的安全咨询在这里:https://www.php.net/archive/2026.php#2026-10-21-5 我们正在等待官方的 PHP 插件图像, 以便我们用补丁的 PHP 构建和测试更新版的 Applepro 。 科普洛·克洛德将保持离线,直到修复就绪,我们将在安全后立即将服务带回. 我们下次更新时间是17: 00 BST.
- monitoring
PHP发布了两个关键弱点的解决方案,即CVE-2026-109618和CVE-2026-109619(https://www.php.net/archive/2026.php)。 遵循联合王国国家信息通报协调委员会的指导(https://www.ncsc.gov.uk/news/critical-security-issues-afecting-php),作为防范措施,科普罗·克洛特仍然离线。 我们正在建立和测试补丁版本。 一旦安装并检查了补丁版本,将返回云址。 我们还不能给予恢复时间。 断电期间发送到Cloud服务台的电子邮件仍在接收中,一旦恢复服务,将进行处理. 支援:支援.deskpro.com下线. 请用电子邮件支持@deskpro.com , 我们正在监测收到的回复。 自办:当有补丁发布时,我们将发电子邮件给客户。 在此之前,请遵循我们今天早些时候的电子邮件中的指导.
- monitoring
我们正继续利用PHP发布的修正来准备和测试一个补丁版的Askpro. Deskpro Cloud 将在补丁版本部署完毕并检查完毕之前保持离线状态,到目前为止,我们无法给出恢复时间. 断电期间发送到Cloud服务台的电子邮件仍在接收中,一旦恢复服务,将进行处理. support.deskpro.com 仍为下行;请提供电子邮件支持@deskpro.com. 自办:当有补丁发布时,我们将发电子邮件给客户。 在此之前,请遵循我们今天早些时候的电子邮件中的指导.
- monitoring
我们仍然在研究Spectpro的补丁版。 由于我们和世界各地许多其他软件供应商在PHP修复时所依赖的第三方软件来源出现延误,因此进展比我们预期的要慢. Deskpro Cloud 将在补丁版本部署和检查之前保持离线状态. 我们还不能给予恢复时间.
- monitoring
我们正在继续研究科普罗的补丁版。 我们和世界各地许多其他软件供应商依赖第三方软件源进行PHP的修复, Deskpro Cloud 将在补丁版本部署和检查之前保持离线状态. 我们还不能给予恢复时间.
- monitoring
We are continuing to work on the patched version of Deskpro and have been able to make significant progress to being able to release. We are still seeing significant delays in the third-party software sources that is hampering us but continuing to monitor a progress where we can. Deskpro Cloud will stay offline until the patched version has been deployed and checked. We cannot yet give a restore time.
- monitoring
The patched versions for Deskpro have been built, tested and are being prepared for release. We are still seeing significant delays in the third-party software sources that is slowing us down from deploying but are continuing to work on this. Deskpro Cloud will stay offline until the patched version has been deployed and checked. We cannot yet give a restore time.
- monitoring
The patched versions for Deskpro have been built, tested and we are preparing to release. We are still seeing significant delays in the third-party software sources that is slowing us down from deploying but are continuing to work on this. Once we have successfully deployed the patches to Deskpro Cloud we will begin to return access to the helpdesks.
- monitoring
Deployment of the patched versions of Deskpro to Cloud customers is under way. We are rolling out the changes across our Cloud infrastructure, and helpdesks will begin coming back online once the patched versions are deployed and checked. We cannot yet give an exact restore time.
- monitoring
We have started bringing Deskpro Cloud helpdesks back online with the patched version. Helpdesks hosted in our EU region are now available again. We are working through the remaining regions and will restore access to the rest of our Cloud customers as each one is completed and checked. If your helpdesk is still showing this status page, it has not been restored yet; please bear with us.
- monitoring
Helpdesks hosted in our UK region are now back online with the patched version, joining our EU region. We are now working on our US region and will restore access to the remaining Cloud customers once it has been completed and checked. We cannot yet give an exact restore time for the US region. If your helpdesk is still showing this status page, it has not been restored yet; please bear with us.
- monitoring
The patched version has now been deployed to our US region and we are carrying out final checks before restoring access. Helpdesks in our EU and UK regions remain available. If your helpdesk is still showing this status page, it has not been restored yet; please bear with us.
- monitoring
All Deskpro Cloud helpdesks are now back online with the patched version, including those hosted in our US region. We will continue to monitor closely. If you notice anything unexpected with your helpdesk, please contact us via support.deskpro.com.
- resolved
All Deskpro Cloud helpdesks remain online on the patched version. We are now working through some follow-on effects of yesterday's outage. Email: Email sent to Cloud helpdesks during the outage has been processed. If you think a message is still missing, please contact our support team with the address it was sent to and roughly when. Self-hosted: Patched releases are available (Deskpro 2026.4.17 and DPC 2.27.13) and we strongly recommend customers update as per guidance from the UKs National Cyber Security Centre, the USAs National Security Agency and the EUs Agency for Cyber Security. A release for ARM servers will follow, and we will email affected customers when it is ready. If you notice anything else unexpected, please contact us via support.deskpro.com. References: - https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php - https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/ - https://www.enisa.europa.eu/news/joint-statement-on-critical-php-vulnerabilities
自动翻译自官方事件更新。