Update 15:30: We have completed this unscheduled maintenance on all Plesk servers.
Update 19:10 (Latest): We have now completed this unscheduled maintenance on our Small Business Email platform too. All our servers have now been updated. Thank you for your patience.
As per guidance published by the National Cyber Security Centre (NCSC) earlier today, we will be installing patches for our server fleet as soon as they are available to patch two incredibly serious issues affecting PHP, the language most of our customers' websites run on (including anything with a CMS like WordPress or Joomla).
It is imperative we install these updates as soon as they are ready for your protection, so whilst we apologise for any downtime, it is necessary given the severity of the security issues that have been discovered. We are expecting the patches to be released around 3pm UK time but this is entirely dependant on our suppliers. Once released, we expect downtime to be no more than 5-10 minutes once updates are released as we'll do a reboot after installing.
Please see guidance from the National Cyber Security Centre for reference: https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php
We are not aware of any exploitation of these vulnerabilities at this time. These patches are preventative.
