Critical PHP updates

Hi, I'm testing this on a new server running AlmaLinux 9 with the latest DirectAdmin version.

When I run `da build versions`, I get:

Latest version of PHP 7.4: 7.4.33
Installed version of PHP 7.4: 7.4.33

I don't see any asterisk (*) indicating that security patches have been applied.

How can I verify if PHP 7.4.33 is actually patched? Is there another way to check?
 
dedd said:
I´m trying the update (debian 11) with custombuild, but I keep gettin errors like E: Failed to fetch http://security.debian.org/debian-s...krb5/krb5-multidev_1.18.3-6+deb11u8_amd64.deb 404 Not Found [IP: 2a04:4e42:82::644 80]

I've no idea why??
Click to expand...

I'm not sure but I think nobody answered yet. Debian 11 is EOL, the files aren't available anymore. I just upgraded one of mine to 12 despite the fact my PHP did update but on it but on another box it didn't and I got more or less the same error. So imho best solution is to upgrade to v12 at least. LTS until 2028.
 
Drakar said:
Hi, I'm testing this on a new server running AlmaLinux 9 with the latest DirectAdmin version.

When I run `da build versions`, I get:

Latest version of PHP 7.4: 7.4.33
Installed version of PHP 7.4: 7.4.33

I don't see any asterisk (*) indicating that security patches have been applied.

How can I verify if PHP 7.4.33 is actually patched? Is there another way to check?
Click to expand...
See custombuild/patches/php-7.4/143-php-7.4-cve-2026-109618.patch

If this patch-file exists, the patch has been applied after a PHP re-build.
 
I wonder why DirectAdmin doesn't update the version numbering, as you also see in phpinfo(). Certain repositories seem to have been doing that for years.

Something like:

PHP Version 7.4.33 da-patch2026-109618​

 
You must log in or register to reply here.
Back
Top