DreamHost reports:
Our Operations team has implemented protections against the PHP remote code execution vulnerability across all our hosting platforms, including shared, VPS, DreamPress, and dedicated. These protections are active now, and we have not observed any attack traffic related to this issue to date.
Patched PHP versions are being released today. Our Technical Operations team is ready to deploy updated PHP builds as soon as they are available.
We'll share another update once the patched builds are available.
https://www.dreamhoststatus.com/pages/incident/575f0f606826303142000510/6ad8c218a7031204d4ca2981
So that's good. I should be able to re-enable stuff sooner rather than later. Though I think I'll wait for the actual updated builds to hit the server first.