Is Open LMS down?

Apologies- There is a subset of clients who are not fully restored. Our teams are continuing to push through them and we appreciate your patience.

Thank you for your continued patience. Almost all sites in the APAC region are now back online, and we are working to restore the remaining few. We are still applying patches to some sites in our EU and US regions and will provide further updates as progress is made. Please note: Once your site is back online, it is fully patched and ready to use.

Thank you for staying patient with us. Other than a small group of sites in the APAC region, all sites are now patched and back online. Our engineers are focusing on this last group of remaining sites to bring them back online. Further updates will follow as work completes. Please note: Once your site is back online, it is fully patched and ready to use.

Thank you for staying patient with us. We are still here. Other than a small group of sites in the APAC region, all sites are now patched and back online. Our engineers are focusing on this last group of remaining sites to bring them back online. Further updates will follow as work completes. Please note: Once your site is back online, it is fully patched and ready to use.

We thank you again for your continued patience. Patching for the remaining sites in the APAC region has been completed. All sites are now patched and have been brought back online.

What is happening: Open LMS is taking all customer sites offline within the next few minutes. Why: Two critical zero-day vulnerabilities in PHP have been discovered and are being actively exploited. No mitigation is currently available, so taking sites offline is the only way to fully protect them. These vulnerabilities affect PHP-based websites worldwide and are not specific to Open LMS. What's next: The PHP project expects to release patches today. As soon as they are available, we will apply them and bring sites back online. openlms.zendesk.com/hc/en-us/articles/31214374861084

Open LMS has taken all customer sites offline as a preventative measure. Why: Two critical zero-day vulnerabilities in PHP have been discovered and are being actively exploited. No mitigation is currently available, so taking sites offline is the only way to fully protect them. These vulnerabilities affect PHP-based websites worldwide and are not specific to Open LMS. What's next: The PHP project expects to release patches today. As soon as they are available, we will apply them and bring sites back online. openlms.zendesk.com/hc/en-us/articles/31214374861084

Thank you for your patience during this global security event. Patches for the PHP issues are beginning to be received, although there are several packages for each of the many versions of PHP that we run. We are actively updating all sites with the patches as they are ready but will not be restoring a service until that site is fully patched. We don't have a clear timeframe on when the full set of patches will be completed, but we are actively moving towards the goal. We will continue to provide updates as we make progress.

Sites are coming back online. PHP security patches are now available, and we are installing them across our hosting environment. We have begun restoring sites as each one is fully patched, and we expect restoration to continue over the next several hours. What this means for you If your site is back online, it has been patched against both PHP vulnerabilities. If your site is still offline, it is in the queue. You don’t need to do anything. We’ll restore it as soon as its patches are installed. We’ll keep posting updates here as restoration progresses. Thank you for your continued patience.

The overwhelming majority of customer sites are now fully patched and back online. We are actively working on the remaining sites and expect to restore them within the next few hours. Thank you for your patience and understanding throughout today’s event.

This incident has been resolved. Please contact support if you have further questions or issues.