Critical PHP updates

I hope there will be some sort of backport/patch for the 7.x series because the number of sites on 7.x without the ability to upgrade is probably unmeasurable.
 
adam12 said:
I hope there will be some sort of backport/patch for the 7.x series because the number of sites on 7.x without the ability to upgrade is probably unmeasurable.
Click to expand...
According to php at this moment, only 8.2 and above will get this. There are a number of backports from RHEL and ubuntu that would get updates, and hardened php with cloudlinux is an option. Custombuild though compiles older php versions manually and would not have any of these back ports.

We don't yet know where the issue is. If it is in php-fpm itself, servers with litespeed or openlitespeed may be unaffected, and potentially fastcgi wouldn't be. However this is all a guess. I know some users run ubuntu (no cloudlinux) but with imunify360. This doesn't officially support hardened php. I asked the imunify team and they told me

Code: 
 Hardened PHP is not a CustomBuild option. It comes as our prebuilt alt-php packages installed under /opt/alt/phpXX, and CustomBuild does not pick them up, so they do not appear in DirectAdmin's selector.
 
On a server without CloudLinux, a website can use a Hardened PHP version only through manual configuration. For example, with php1_mode=lsphp in CustomBuild, the version can be set per directory in .htaccess. This is the block for PHP 7.4:

<FilesMatch "\.(php4|php5|php3|php2|php|phtml)$">
SetHandler application/x-lsphp74
</FilesMatch>

This is set up outside DirectAdmin, so DirectAdmin's selector will not show or manage it.

Depending on how big the issue is, it may require patching the old sources directly.
 
You must log in or register to reply here.
Back
Top