Hello avij,
thank you for your quick answer.
When reading the backporting page of RHEL you linked to, then I'm not sure, if this example is transferable to the situation we have in CentOS.
Let me explain:
RHEL 7 was shipped originally with PHP 5.4. See here as a proof, for example:
https://access.redhat.com/discussions/2919611
But you could install PHP 5.6 later on via a software collection maintained by Red Hat themselves:"But you could follow the steps from the KB 2705621 to get PHP 5.6 from the Red Hat Software Collections." (quotation from the same article)
For me, it's unclear, if that means that Red Hat themselves will provide security backports for PHP 5.6 from 2019 on.
But even if they do, the situation is probably not the same in CentOS, because CentOS uses another external repo than Red Hat. At least, our hosting provider does. For PHP 5.6 he uses the Remi repo.
Additional information for the Remi repo:
The operator of the repo did even in this year some backports for security fixes for PHP versions 5.4 and 5.5, see here:
https://blog.remirepo.net/post/2018/03/ ... P-versions
("I also do the backport of some security fix for the RPM of the old versions 5.4.45 and 5.5.38.")
So the question is if we could assume that he will do the same for PHP 5.6 after its EOL
?
Perhaps this question can be answered only by Remi himself, so I should try to ask _him_ instead ...
Kind regards,
Andreas
