Who'd ready for the absolute dumpster fire that this PHP vuln is going to be tomorrow? Hopefully services like CloudFlare WAF are able to mitigate via rules to help limit blast radius 😬
commit 536ebc9
I just spent the evening upgrading everything to 8.5 and running Ubuntu updates. So the system is clean and ready for the patch.
Good shout on the WAF; I'll double-check that everything is behind CF too. I imagine there will be a lot of probing tomorrow, even if you're patched.