Get ready to patch your PHP versions tomorrow. This seems like the worst CVE _ever_? Keep an eye on Cloud/Forge updates, they may be able to have the patch before that on their services.
commit d1ea8a9
I wonder how many Wordpress instances running PHP 7 will be hacked by this