PHP Foundation: Critical PHP Security Releases (8.5.12, 8.4.27, 8.3.36, 8.2.35)

Now working on the EL7 servers.

What's the point? CentOS 7 is a sitting duck at this point.

Getting  stuck here -  Did you encounter this?

checking for BZip2 support... yes
checking for BZ2_bzerror in -lbz2... no
configure: error: bz2 module requires libbz2 >= 1.0.0
make: *** No targets specified and no makefile found.  Stop.
make: *** No rule to make target `install'.  Stop.
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Skipping as php build failed
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Skipping as php build failed
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Skipping as php build failed
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * epel: dl.fedoraproject.org
Package libsodium-1.0.18-1.el7.x86_64 already installed and latest version
Package libsodium-devel-1.0.18-1.el7.x86_64 already installed and latest version
Nothing to do
chdir: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 28505  100 28505    0     0  35065      0 --:--:-- --:--:-- --:--:-- 35061
/usr/local/cwpsrv/htdocs/resources/conf/el7/php-fpm_selector/external_modules/8.3/sodium.sh: line 9: /opt/alt/php-fpm83/usr/bin/phpize: No such file or directory
/usr/local/cwpsrv/htdocs/resources/conf/el7/php-fpm_selector/external_modules/8.3/sodium.sh: line 10: ./configure: No such file or directory
make: *** No targets specified and no makefile found.  Stop.
make: *** No rule to make target `install'.  Stop.
/usr/local/cwpsrv/htdocs/resources/conf/el7/php-fpm_selector/external_modules/8.3/sodium.sh: line 14: /opt/alt/php-fpm83/usr/bin/php-config: No such file or directory
ERROR: Missing extension file /sodium.so
exe:/opt/alt/php-fpm83/usr/sbin/php-fpm

Build Completed
###################


Error:Can't add notification!

I think same as mine. tried to install anything using cwp php selector but actually nothing actually added.

There is still another thing i don't get.

Why is the CWP internal PHP still using 7.2.30, is there any way to update this and why isn't this update not comming from the devs itself?

And there is no newer version available:


[root@srv1 ~]# dnf --refresh --showduplicates list cwpphp
CentOS Web Panel repo for Linux 8 - x86_64       20 kB/s | 2.9 kB     00:00   
AlmaLinux 8 - BaseOS                            7.1 kB/s | 3.8 kB     00:00   
AlmaLinux 8 - AppStream                         8.7 kB/s | 4.3 kB     00:00   
AlmaLinux 8 - Extras                            6.5 kB/s | 3.3 kB     00:00   
AlmaLinux 8 - PowerTools                        8.5 kB/s | 4.2 kB     00:00   
AlmaLinux 8 - PowerTools Source                 6.0 kB/s | 3.0 kB     00:00   
AlmaLinux 8 - PowerTools debuginfo              5.9 kB/s | 3.0 kB     00:00   
Extra Packages for Enterprise Linux 8 - x86_64   62 kB/s |  36 kB     00:00   
MariaDB                                         4.5 kB/s | 3.0 kB     00:00   
nginx repo                                       25 kB/s | 3.0 kB     00:00   
varnishcache_varnish64                          324  B/s | 833  B     00:02   
varnishcache_varnish64-source                   343  B/s | 833  B     00:02   
Veeam Backup for GNU/Linux - x86_64              12 kB/s | 3.0 kB     00:00   
Installed Packages
cwpphp.x86_64                           7.2.30-3                            @cwp
Available Packages
cwpphp.x86_64                           7.0.14-3                            cwp
cwpphp.x86_64                           7.0.15-1                            cwp
cwpphp.x86_64                           7.0.15-2                            cwp
cwpphp.x86_64                           7.0.16-1                            cwp
cwpphp.x86_64                           7.0.16-2                            cwp
cwpphp.x86_64                           7.0.16-4                            cwp
cwpphp.x86_64                           7.0.17-1                            cwp
cwpphp.x86_64                           7.0.24-1                            cwp
cwpphp.x86_64                           7.0.24-2                            cwp
cwpphp.x86_64                           7.0.32-1                            cwp
cwpphp.x86_64                           7.2.30-1                            cwp
cwpphp.x86_64                           7.2.30-3                            cwp
[root@srv1 ~]#

https://forum.centos-webpanel.com/php/cwp-system-php-8-3-36-update-cve/msg54564/#msg54564

If you're running Imunify360  on your machine with Hardened PHP installed, these scripts help enabling the hardened PHP for accounts

https://github.com/ChobPT/cwp-enable-i360-hardened-php

Tested it to be working

Hope it helps