NHAIS ILL and the PHP Advisory
The vulnerabilities to PHP sites announced yesterday by the NSA have been addressed on the NHAIS ILL system. We were notified yesterday by Soutron Global (the company that now owns Auto-Graphics and which hosts our ShareIt software) that there was an issue and that they were addressing it:
"We have identified a security vulnerability in PHP, a component used by SHAREit including for features such as cover images (jacket art). We are treating this as a priority and are applying the fix across our hosted service now. No action is needed from you."
Today we were notified that all is well:
"All SHAREit and VERSO sites, SaaS and remotely hosted, are now running versions that include the needed PHP vulnerability fixes. The team identified every affected product and server, developed a fix and plan, and updated every affected environment within a day of the disclosure. No action is needed from customers."
No comments:
Post a Comment
Comments on this blog are welcome, but they are moderated. Signed comments that we feel make a positive contribution to the discussion will be posted.