Hi there, Just in case anyone is wondering about possible effects on BackupPC of the recently published vulnerabilities in PHP, be assured that PHP is not used by BackupPC.
If you are using BackupPC in conjunction with a Web server that also provides other services (although I recommend against doing that), you might want to check if PHP is being used by those other services. If it is, do take immediate action to secure it if you haven't already. If you cannot immediately do that then take the server offline. In any case you should check for compromise; at the time of writing many millions of attacks are ongoing. This morning I've dropped almost a hundred /24s from which attacks are emanating and we don't use PHP... If for example you are using Apache, and mod_php is loaded by Apache's configuration but unused (some configurations load modules by default for no apparent reason) then you might want to edit the configuration to disable mod_php and restart Apache. Removing the PHP module from Apache will not affect BackupPC. -- 73, Ged. _______________________________________________ BackupPC-users mailing list [email protected] List: https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki: https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
