Comment by jopicornell

Well, that's a "mitigation problem", it was part the official mitigation: set two flags on the php.ini and block multipart forms. You can see them in the ghsa. If that's what they recommended and it was part of the most recommended mitigations on the intrnet (I already did that 6 hours before release without even knowing if sources were right). I see also recommended to shutdown your server. This wasn't official and I'd liked to know if that was the right path.