Page 1 of 2

Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/30 17:56:06
by josie
Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

I have never upgraded PHP and I'm unsure how to proceed

Any assistance would be gratefully received

Thanks

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 01:18:50
by TrevorH
Where did you get php 5.4.45 from on CentOS 6? We ship 5.3.3 and 5.4.40 is available as an SCL.

php 5.4 is EOL upstream at php.net so those are probably your only choices for supported versions now.

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 08:31:54
by josie
Thanks for the reply

It is ‪CentOS 6.9‬
Plesk Onyx Version 17.5.3

I do a yum check-date as a matter of routine every day, and no updates are listed as available.
I have never upgraded PHP before and have no idea what is involved?

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 11:04:59
by josie
It seems as if from within Plesk I can install multiple versions of PHP and select any on a per site basis.

5.5; 5.6; 7.0; 7.1; 7.2

I am awaiting confirmation of this and will return with a definitive answer in the event it might help someone else

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 11:47:48
by josie
Plesk confirm I can install other PHP versions from within Plesk and select on a per site basis, but they have confirmed that the 5.4.45 is shipped by the OS Vendor which I presume is Centos.

5.4.45 reached its end of life on 3 Sep 2015, 2 years, 4 months ago leaving me a little confused.

Should this version be removed?
Why is Centos still using it?

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 11:54:10
by remirepo
CentOS provides 5.4.16 with security fix

Please see https://access.redhat.com/security/updates/backporting/ for information on backporting of security fixes and features in CentOS and RHEL

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 11:59:33
by josie
Hello remirepo, thank you for your reply

Centos have provided me with 5.4.45 so I'm even more confused.
Why would I go to an earlier version when I'm not sure the current one is acceptable and secure?

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 12:44:23
by remirepo
You are not using CentOS but a Plesk altered distribution.

Neither Plesk nor the machines it is installed on are supported here due to the large number of changes they make. Please ask for support in ##plesk

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 14:06:05
by josie
# cat /etc/issue.net
CentOS release 6.9 (Final)

I have checked at Plesk and they say definitively the PHP Version 5.4.45 is issued by the OS Vendor, and that would appear to be CentOS

When I run yum check-update the repositories checked appear to be official CentOS ones

Re: Is PHP 5.4.45 on Centos 6.9 secure and easily upgraded

Posted: 2018/01/31 14:13:54
by remirepo
> they say definitively the PHP Version 5.4.45 is issued by the OS Vendor,

They are definitively wrong.