Potential Integration Delays Due to Web-Wide Security Updates
A critical PHP security patch is being rolled out across the web this morning. Our team is actively implementing necessary updates across JaroDesk servers and resources. Our systems remain operational, with no known impact to customer data.
While JaroDesk is operating normally, third-party platforms and integrated partners may experience disruptions as they implement their own security updates. As a result, we may experience intermittent communication failures, timeouts, or processing delays with external systems throughout the day.
We are already observing timeouts when communicating with Mercury and are working to retry any affected transactions.
Our team is actively monitoring integrations and will continue investigating and retrying failed communications as needed. We will provide additional updates as we learn more.
Current Status
- Security Patches Implemented: The updated, secure versions of PHP are now running across our core JaroDesk platform.
- No Identified Security Impact: We have found no evidence of attempted or successful unauthorized access to JaroDesk systems or customer data related to this vulnerability.
- Additional Security Protections: The enhanced security filtering previously implemented remains active, providing an additional layer of protection across the platform.
- Remaining Updates: A small number of supporting systems require additional configuration before the patches can be applied. These updates are scheduled to take place after business hours over the next several days to minimize any potential disruption. Additional security protections remain in place for these systems in the meantime.
Our Engineering and Security teams will continue monitoring the environment and completing the remaining updates to ensure all systems are fully patched.