PHP Obsolete

[bignose21]

Is there any plan to update the PHP on the Server Edition, we got picked up on a network security scan, looking at PHP supported versions Version 8 is current and version 7 is mostly end of life.

Looking on the IP Office server I see:

# php -v
PHP 5.4.16 (cli) (built: Apr 1 2020 04:07:17)
Copyright (c) 1997-2013 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies

IPO is on 11.1.2.0, does anyone know if this changes in the just released 11.1.2.1 or in the 11.1.2.2 planned for March?

 

[Travis Harper]

The version in the release is still outdated.

I am not suggesting YOU do this, but for educational purposes, I have updated PHP on my system.
Add repos,

https://www.cyberciti.biz/faq/how-to-install-php-7-2-on-centos-7-rhel-7/

Then do: yum install php

[root@sip ~]# php -v
PHP 7.2.34 (cli) (built: Nov 15 2021 09:20:49) ( NTS )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.2.0, Copyright (c) 1998-2018 Zend Technologies

Did not break anything on my system.
Disable the repo, when you are done.
Travis

 

[bignose21]

I guess that could cause me issues with support even though I imagine it makes no difference to the functionality, no internet on the IPO Servers so would need to do it with the TAR from php.net, cheers for the info though

 

[sizbut]

You need to talk to either RHEL or your security scan provider. That PHP is the standard version included in CentOS 7 and maintained/supported by RHEL. ?Why they branched from sources maintained by php.net I don't know but probably has its answers somewhere in open source licensing requirements.

Stuck in a never ending cycle of file copying.