Is enabling fileinfo safe?

Vladimir Šebez

• May 22, 2017 07:45

Currently we have fileinfo module disabled on all our servers, but it seems that new versions of PrestaShop require it. I am concerned about enabling this module because it seems that this module often has security issues (NVD - Results). Is there a way to enable this module and secure it?

• 

  cPanelMichael

  • May 24, 2017 16:13

  Hello, I'm not aware of any specific actions you can take to help increase the security for this PHP extension. However, note the security reports related to this PHP extension in the URL you provided appear to have already been addressed in newer versions of PHP. For instance, you can review each specific CVE to see which PHP versions are affected, and then confirm if your system uses a version of PHP affected by the bug. Thank you.

  0
• 

  Vladimir Šebez

  • May 30, 2017 11:12

  That is what I'll do. Thanks.

  0

Please sign in to leave a comment.