Two critical security vulnerabilities have been discovered in PHP, which is widely used in websites and online stores. These vulnerabilities could allow an attacker to take control of a server. The vulnerabilities do not affect Odoo or its built-in website and e-commerce features, as Odoo does not use PHP.
If you use a Magento or WooCommerce online store integrated with Odoo, a security breach in that store could also affect data transferred to Odoo through the integration, such as orders. The same applies to other PHP-based services connected to Odoo.
If you use PHP-based services, please contact their administrators without delay to confirm that the necessary PHP security updates have been installed.
More information: PHP security advisory