PHP security patch timeline

coursevector

• May 01, 2018 09:53

Is there a timeline for the latest PHP security patches? Multiple Vulnerabilities in PHP Could Allow for Arbitrary Code Execution

• 

  cPanelLauren

  • May 01, 2018 15:38

  Hi @coursevector It looks like the EasyApache team is preparing a maintenance release which would effectively update the following PHP versions: ea-php56 -> 5.6.36 ea-php70 -> 7.0.30 ea-php71 -> 7.1.17 ea-php72 -> 7.2.5 When the maintenance release does go live we will update the following: cPanel Newsroom | cPanel, Inc. I've asked our development for an exact date/time and as soon as we have a definitive date/time I will update this thread. Thank you,

  0
• 

  cPanelLauren

  • May 01, 2018 16:07

  Hi @coursevector I just wanted to let you know that they're planning to have this released today hopefully prior to 6PM EST though I cannot guarantee that time, it is the plan Thank you,

  0
• 

  coursevector

  • May 01, 2018 18:23

  Thanks for the update!

  0
• 

  cPanelLauren

  • May 01, 2018 18:27

  You're very welcome!

  0
• 

  cPanelMichael

  • May 01, 2018 22:11

  Hello @coursevector, The updated RPMs are now published to the EasyApache 4 repository. You can update your system by selecting Run System Update in WHM Home >> Software >> EasyApache 4 or by running yum update via the command line. The full release announcement is available at: EasyApache 2018-05-01 Security Release | cPanel Newsroom Let us know if you have any questions. Thanks!

  0
• 

  garconcn

  • May 01, 2018 23:48

  Tried to update but didn't get any new updates. Tried yum update, /scripts/upcp and update from WHM EA4. # yum update Loaded plugins: fastestmirror, langpacks, rhnplugin, universal-hooks This system is receiving updates from CLN. Loading mirror speeds from cached hostfile * cpanel-addons-production-feed: 208.43.129.162 * cloudlinux-x86_64-server-7: xmlrpc.cln.cloudlinux.com No packages marked for update # php -v ea-php-cli Copyright 2017 cPanel, Inc. PHP 7.0.29 (cli) (built: Apr 6 2018 10:29:30) ( NTS ) Copyright (c) 1997-2017 The PHP Group Zend Engine v3.0.0, Copyright (c) 1998-2017 Zend Technologies with Zend OPcache v7.0.29, Copyright (c) 1999-2017, by Zend Technologies

  0
• 

  sparek-3

  • May 02, 2018 00:42

  Try yum clean all yum update This will force your system to refresh from the repositories. Although, if you are are using CloudLinux, you may have to wait for CloudLinux to package the updated packages.

  0
• 

  garconcn

  • May 02, 2018 00:45

  Try yum clean all yum update This will force your system to refresh from the repositories. Although, if you are are using CloudLinux, you may have to wait for CloudLinux to package the updated packages.

  
  Tried this as well, still no update. I will wait for cloudlinux. Thanks.

  0
• 

  cPanelMichael

  • May 02, 2018 14:25

  Hi @garconcn, CloudLinux uses it's own separate EasyApache 4 repository. You can follow their blog to see when they publish the updated RPMs:

  0

Please sign in to leave a comment.