AD IT Systems GmbH - Notice history

• What happened?

  • Critical security vulnerabilities in PHP have been publicly disclosed, affecting PHP-based web applications worldwide.

  • We are aware that this vulnerability exists.

• Why is this relevant?

  • The vulnerabilities could potentially be exploited to execute malicious code on affected systems.

  • We take any vulnerability of this kind seriously and are continuously monitoring the situation.

• When will this be fixed?

  • An official patch from the PHP developers that closes the vulnerability is currently still pending.

  • As soon as a new PHP version is available that fixes the security vulnerability, we will roll it out immediately.

• Who is affected?

  • Customers whose web applications run on our hosting infrastructure with PHP.

• What do you need to do?

  • Customers running container-based PHP applications must update their container images on their own as soon as a patched PHP base image is available. This is outside our sphere of influence and cannot be rolled out automatically by us.

• How are we proceeding?

  • We are already working on mitigation and defensive measures to reduce the risk until an official patch is released.

  • Updates on this incident will be published as soon as new information becomes available to us.

Dear customers,

We want to inform you about upcoming maintenance work:

• What will take place?

  • We are updating all systems to the Debian 13 "Trixie" operating system.

• Why is the maintenance work necessary / What is the advantage of this maintenance work for you?

  • To maintain system security and the current state of the art.

• When will the work take place?

  • between 2026-10-19 and 2026-10-22, between 09:00 and 17:00 (CEST).

  • The downtime per system will be less than 30 minutes.

• Who is affected?

  • All customers on our shared and managed hosting infrastructure

• How will this be affecting me?

  • This changes the default version of PHP after the update.

  • PHP 8.4 will be executed instead of 8.2 in the shell (/usr/bin/php).

  • For websites, “Standard (8.2)” will become “Standard (8.4)” after the update.

  • If your website is not compatible with this PHP version, please set the required PHP version for each domain accordingly before the update.

  • Furthermore, the MySQL database version will change from MariaDB 10.11 to MariaDB 11.8.

    • Please ensure the compatibility of the CMS used.

  • Python will be updated from Python 3.11 to 3.13.

    • Please check and record all modules, for example, via the requirements.txt, before we upgrade to "Trixie".

    • We will update your VirtualEnv environments for you.

    • Ensure all your modules are compatible with Python 3.13 before the update.

  • How can I get more information?

    • In our documentation:

      • https://www.aditsystems.info/allgemein/debian/deb13/

      • https://www.aditsystems.info/liveconfig/domain/php/

We will inform you when the maintenance has been completed.