The set of vulnerabilities is dubbed PHP2Shell and disclosure is scheduled for 14:00 UTC with attacks expected to follow soon after.
It is adviced to take offline every non-vital services until the patch has been installed (or the Docker image has been updated with a patched version of PHP)
Could not pull shit from it this morning. I panicked because my distro’s repos did not have the version numbers of the patched packages, but apparently the Ubuntu maintainers back ported the patches. Sigh of relief.