Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Support for security such as Firewalls and securing linux
josie
Posts: 16
Joined: 2016/02/19 08:09:21

Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by josie » 2018/01/30 17:56:06

Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

I have never upgraded PHP and I'm unsure how to proceed

Any assistance would be gratefully received

Thanks

User avatar
TrevorH
Forum Moderator
Posts: 23203
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by TrevorH » 2018/01/31 01:18:50

Where did you get php 5.4.45 from on CentOS 6? We ship 5.3.3 and 5.4.40 is available as an SCL.

php 5.4 is EOL upstream at php.net so those are probably your only choices for supported versions now.
CentOS 5 died in March 2017 - migrate NOW!
Full time Geek, part time moderator. Use the FAQ Luke

josie
Posts: 16
Joined: 2016/02/19 08:09:21

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by josie » 2018/01/31 08:31:54

Thanks for the reply

It is ‪CentOS 6.9‬
Plesk Onyx Version 17.5.3

I do a yum check-date as a matter of routine every day, and no updates are listed as available.
I have never upgraded PHP before and have no idea what is involved?

josie
Posts: 16
Joined: 2016/02/19 08:09:21

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by josie » 2018/01/31 11:04:59

It seems as if from within Plesk I can install multiple versions of PHP and select any on a per site basis.

5.5; 5.6; 7.0; 7.1; 7.2

I am awaiting confirmation of this and will return with a definitive answer in the event it might help someone else

josie
Posts: 16
Joined: 2016/02/19 08:09:21

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by josie » 2018/01/31 11:47:48

Plesk confirm I can install other PHP versions from within Plesk and select on a per site basis, but they have confirmed that the 5.4.45 is shipped by the OS Vendor which I presume is Centos.

5.4.45 reached its end of life on 3 Sep 2015, 2 years, 4 months ago leaving me a little confused.

Should this version be removed?
Why is Centos still using it?

User avatar
remirepo
Posts: 289
Joined: 2014/09/21 09:07:12
Location: France
Contact:

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by remirepo » 2018/01/31 11:54:10

CentOS provides 5.4.16 with security fix

Please see https://access.redhat.com/security/updates/backporting/ for information on backporting of security fixes and features in CentOS and RHEL
Remi's Repository - Forum - Blog

josie
Posts: 16
Joined: 2016/02/19 08:09:21

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by josie » 2018/01/31 11:59:33

Hello remirepo, thank you for your reply

Centos have provided me with 5.4.45 so I'm even more confused.
Why would I go to an earlier version when I'm not sure the current one is acceptable and secure?

User avatar
remirepo
Posts: 289
Joined: 2014/09/21 09:07:12
Location: France
Contact:

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by remirepo » 2018/01/31 12:44:23

You are not using CentOS but a Plesk altered distribution.

Neither Plesk nor the machines it is installed on are supported here due to the large number of changes they make. Please ask for support in ##plesk
Remi's Repository - Forum - Blog

josie
Posts: 16
Joined: 2016/02/19 08:09:21

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by josie » 2018/01/31 14:06:05

# cat /etc/issue.net
CentOS release 6.9 (Final)

I have checked at Plesk and they say definitively the PHP Version 5.4.45 is issued by the OS Vendor, and that would appear to be CentOS

When I run yum check-update the repositories checked appear to be official CentOS ones

User avatar
remirepo
Posts: 289
Joined: 2014/09/21 09:07:12
Location: France
Contact:

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Post by remirepo » 2018/01/31 14:13:54

> they say definitively the PHP Version 5.4.45 is issued by the OS Vendor,

They are definitively wrong.
Remi's Repository - Forum - Blog

Post Reply