PHP Vulnerability Responses by Company

Chroot

Global hosting
Aliases / services
Chroot / chroot.ro / CHROOT / CHROOT NETWORK SRL
Official website
https://chroot.ro/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Găzduire Web / Găzduire VIP (cPanel)

Response status
Web and VIP hosting patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The notice confirms PHP package updates. Older versions displayed by cPanel include backported official fixes; Imunify360 also mitigates some attack paths.

Scope: Reseller, self-managed VPS/dedicated and managed services have distinct clauses, including individually notified exceptions where managed updates were not possible.

What users should do

No server-patching action is required. Check compatibility before migrating older PHP.

Official service URL

Source URLs

  1. Chroot: PHP vulnerability responsehttps://portal.chroot.ro/announcements/64/Alerta-de-securitate-PHP2Shell.htmlResponse evidence
  2. https://portal.chroot.ro/announcements?language=englishhttps://portal.chroot.ro/announcements?language=englishService and operation documentation

Reseller web hosting

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Chroot states that reseller hosting uses the same patched environment as web hosting.

Scope: Backported fixes may retain the original PHP version string. Completion does not cover self-managed VPS or dedicated servers.

What users should do

No infrastructure PHP patching is required from customers. Keep CMS and plugins updated and contact support for anomalies.

Source URLs

  1. Chroot: PHP vulnerability responsehttps://portal.chroot.ro/announcements/64/Alerta-de-securitate-PHP2Shell.htmlResponse evidence

Self-managed VPS

Response status
Customer update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Chroot assigns PHP remediation on self-managed servers to customers; automatic hosting remediation does not include them.

Scope: The advisory's temporary mitigations do not guarantee complete remediation of both vulnerabilities. Distinct from contracted managed services.

What users should do

Install the vendor's fixed PHP release and restart PHP and related services. Check migration options for unsupported PHP.

Source URLs

  1. Chroot: PHP vulnerability responsehttps://portal.chroot.ro/announcements/64/Alerta-de-securitate-PHP2Shell.htmlResponse evidence

Self-managed dedicated servers

Response status
Customer update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Chroot assigns PHP remediation on self-managed servers to customers; automatic hosting remediation does not include them.

Scope: The advisory's temporary mitigations do not guarantee complete remediation of both vulnerabilities. Distinct from contracted managed services.

What users should do

Install the vendor's fixed PHP release and restart PHP and related services. Check migration options for unsupported PHP.

Source URLs

  1. Chroot: PHP vulnerability responsehttps://portal.chroot.ro/announcements/64/Alerta-de-securitate-PHP2Shell.htmlResponse evidence

Managed server services

Response status
Provider remediation with individually notified exceptions
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Chroot reports updating contracted managed servers, with customers individually notified where a direct update is not possible.

Scope: Exceptions prevent treating every managed server as unconditionally patched. Self-managed subscriptions are excluded.

What users should do

Check for individual notifications and complete the requested work or coordination for environments awaiting updates.

Source URLs

  1. Chroot: PHP vulnerability responsehttps://portal.chroot.ro/announcements/64/Alerta-de-securitate-PHP2Shell.htmlResponse evidence
Related official sources
  1. Chroot: PHP vulnerability responseOfficial notice
  2. Operator and service informationOfficial information directory

Comments