Security Alert: Hosted Wikis Temporarily Offline

Hello Subscriber

This morning, we learned about two critical security vulnerabilities in PHP, the programming language that runs your DokuWiki. These vulnerabilities affect PHP itself, not just DokuWiki, and could allow attackers to execute arbitrary code on affected servers. This could be used to steal sensitive data, run malicious software, send spam, or delete data.

As a precaution, we have temporarily taken all wikis hosted by CosmoCode offline. We took this step to protect your data while the vulnerabilities remain unpatched.

The PHP security team has announced that security updates are scheduled for today at 14:00 UTC (16:00 CEST). We are monitoring the situation closely and will install the necessary updates as soon as they become available. We will restore access to your wikis as soon as we can do so safely.

If you operate DokuWiki or any other PHP-based applications on your own servers, we strongly urge you to take immediate action. Prepare to install the security updates as soon as they are released. If you cannot apply the updates promptly, consider temporarily isolating affected services from the internet.

Further information:

Your CosmoCode DokuWiki Team