Two critical vulnerabilities in PHP itself put every site on an unpatched PHP at risk, October CMS sites included. The fix is a PHP update, not an October update. Here is how to check your sites, what to ask your host, and where each October version stands.
