A lot of folks are having to deal with the php2shell issue in their infrastructure right now, and Nico Kruger has some advice on how you can check if your infrastructure is impacted, and how to roll out the patched packages:
1. Upgrade all PHP packages together.
2. Restart workers after patches.
3. Roll out in waves, noop first.
Full read:
https://www.puppet.com/blog/patching-php2shell-with-puppet
PuppetHow to Secure Your PHP Infrastructure and Remediate php2shell with Puppet | PuppetThe critical PHP2Shell vulnerabilities put PHP systems at risk of remote code execution. Identify affected PHP versions, check your environment, and use Puppet to deploy patched packages consistently across your infrastructure.