Are these two vulnerabilities addressed in the latest update?
These vulnerabilities aren’t application-specific; Concrete can’t do anything about them.
The only way to protect your websites is to update PHP.
Thanks Michele, I just panicked after client panicked 'cause her websites were down.
Hosting company fixed it very swiftly.