Recent Posts
21
PHP / Re: Update your PHP ASAP 🚨
« Last post by VinzzB on October 22, 2026, 12:48:11 PM »I was able to update PHP through the PHP-FPM selector and the PHP Version Switcher.
First i had to force update CWP with this command: sh /scripts/update_cwp
After this the new version appears in the dropdown lists.
To compile v8.5.12 in "PHP Version Switcher" I had to disable the zlib extension as it was complaining about a missing dependency on zlib-dir (which is not available in the list of extensions)
First i had to force update CWP with this command: sh /scripts/update_cwp
After this the new version appears in the dropdown lists.
To compile v8.5.12 in "PHP Version Switcher" I had to disable the zlib extension as it was complaining about a missing dependency on zlib-dir (which is not available in the list of extensions)
22
PHP / Re: Update your PHP ASAP 🚨
« Last post by Wonder on October 22, 2026, 10:51:55 AM »Issue identified and resolved (AlmaLinux 8 / CWP PHP-FPM Selector)
After the latest CWP update, this issue affects **not only the new PHP versions (8.4.27 and 8.5.12), but also previously working PHP versions when rebuilt**, including PHP 8.4.24.
PHP-FPM fails to start with:
`PHP Fatal error: Unable to start pcre module in Unknown on line 0`
The issue was related to the `--with-external-pcre` build option and the external PCRE2 library.
How solved:
Edit:
`/usr/local/cwpsrv/htdocs/resources/conf/el8/php-fpm_selector/8.4.ini`
Under `[pcre]`, change `default=1` to `default=0`.
Then rebuild PHP-FPM 8.4.27 with the external PCRE option disabled in CWP.
Result: PHP-FPM 8.4.27 starts successfully using bundled PCRE2 10.44, with all previously installed extensions preserved.
This workaround was tested successfully with PHP 8.4.27 on AlmaLinux 8. PHP 8.5.12 has not yet been retested with this change.
After the latest CWP update, this issue affects **not only the new PHP versions (8.4.27 and 8.5.12), but also previously working PHP versions when rebuilt**, including PHP 8.4.24.
PHP-FPM fails to start with:
`PHP Fatal error: Unable to start pcre module in Unknown on line 0`
The issue was related to the `--with-external-pcre` build option and the external PCRE2 library.
How solved:
Edit:
`/usr/local/cwpsrv/htdocs/resources/conf/el8/php-fpm_selector/8.4.ini`
Under `[pcre]`, change `default=1` to `default=0`.
Then rebuild PHP-FPM 8.4.27 with the external PCRE option disabled in CWP.
Result: PHP-FPM 8.4.27 starts successfully using bundled PCRE2 10.44, with all previously installed extensions preserved.
This workaround was tested successfully with PHP 8.4.27 on AlmaLinux 8. PHP 8.5.12 has not yet been retested with this change.
23
Information / Re: CWP Version: 1.21 and latest PHP vulnerabilities
« Last post by ghoste on October 22, 2026, 09:54:02 AM »I updated my cwp and the new php versions are available
PIDFile=/usr/local/cwp/php71/var/run/cwp-php-fpm.pid
ExecStart=/usr/local/cwp/php71/sbin/php-fpm --nodaemonize --fpm-config /usr/local/cwp/php71/etc/php-fpm.conf -R
Alright, so you have updated PHP versions for CWP users, but the panel itself still uses outdated PHP versions.
24
Information / Re: CWP Version: 1.21 and latest PHP vulnerabilities
« Last post by Watchdog on October 22, 2026, 09:32:34 AM »I updated my cwp and the new php versions are available
25
Information / Re: CWP Version: 1.21 and latest PHP vulnerabilities
« Last post by ghoste on October 22, 2026, 09:20:04 AM »This is incredible, one of the biggest security issues and we have 0 feedback from CWP Team.Yeeessssssss!
WTF!!! Can someone from CWP team access this forum and give us some updates, what is the plan for CWP?
But the new php versions are already available.
It is incredibly disrespectful of them; I don’t understand this approach. I’ve mentioned on the forum several times that CWP seems to be a dead project, given that we receive absolutely no information regarding CWP updates. Is there a lack of funding? I’ll say it again: raise the price—instead of $11, charge $33 per license. As long as you keep doing the work, users won’t abandon CWP. But does anyone even know who is in charge? Someone should come forward and introduce the team to us, so we know what we’re dealing with. We are all fed up with these "patchwork" fixes and lies from their side.
26
PHP / Re: Update your PHP ASAP 🚨
« Last post by Wonder on October 22, 2026, 09:16:26 AM »Yes, after the latest CWP update, the PHP-FPM Selector now offers the patched versions: **8.3.36, 8.4.27 and 8.5.12**.
However, **PHP Version Switcher still has an issue with PHP 8.4 and 8.5**, showing the error `Missing dependencies found: zlib → zlib-dir`.
On AlmaLinux 8, both `8.4.ini` and `8.5.ini` reference `include=zlib-dir`, but neither defines the corresponding `[zlib-dir]` section. Hopefully this can be fixed in an upcoming update.
**My main concern, however, is CWP's internal PHP 7.2.30**, which is still being used by the panel itself.
Even if we update all our website PHP versions, the panel continues to rely on this outdated and unsupported PHP runtime.
Edit:
Update — PHP-FPM 8.4 and 8.5 builds fail to start (AlmaLinux 8 )
Unfortunately, I've encountered another issue after the latest CWP update.
I tried compiling PHP-FPM **8.4.27 and 8.5.12** using the official CWP PHP-FPM Selector on AlmaLinux 8.
Both builds appear to complete successfully, showing:
```
Build Completed
###################
Error:Can't add notification!
```
However, neither PHP-FPM service starts.
Both versions fail with the same fatal error:
```
PHP Fatal error: Unable to start pcre module in Unknown on line 0
```
The services exit with status 254.
I also tested both PHP binaries directly:
```
/opt/alt/php-fpm84/usr/bin/php -n -v
/opt/alt/php-fpm85/usr/bin/php -n -v
```
Both fail with `Unable to start pcre module`, even with `-n` (without loading php.ini).
PHP 8.4 additionally reports a duplicate `mbstring` warning, but the fatal PCRE error is common to both versions.
So, although the patched versions are now available in the selector, **the resulting PHP installations are unusable on my server**.
Has anyone else experienced this issue with the latest CWP PHP-FPM builds on AlmaLinux 8?
Could the CWP team please investigate the compilation process?
Thanks!
However, **PHP Version Switcher still has an issue with PHP 8.4 and 8.5**, showing the error `Missing dependencies found: zlib → zlib-dir`.
On AlmaLinux 8, both `8.4.ini` and `8.5.ini` reference `include=zlib-dir`, but neither defines the corresponding `[zlib-dir]` section. Hopefully this can be fixed in an upcoming update.
**My main concern, however, is CWP's internal PHP 7.2.30**, which is still being used by the panel itself.
Even if we update all our website PHP versions, the panel continues to rely on this outdated and unsupported PHP runtime.
Edit:
Update — PHP-FPM 8.4 and 8.5 builds fail to start (AlmaLinux 8 )
Unfortunately, I've encountered another issue after the latest CWP update.
I tried compiling PHP-FPM **8.4.27 and 8.5.12** using the official CWP PHP-FPM Selector on AlmaLinux 8.
Both builds appear to complete successfully, showing:
```
Build Completed
###################
Error:Can't add notification!
```
However, neither PHP-FPM service starts.
Both versions fail with the same fatal error:
```
PHP Fatal error: Unable to start pcre module in Unknown on line 0
```
The services exit with status 254.
I also tested both PHP binaries directly:
```
/opt/alt/php-fpm84/usr/bin/php -n -v
/opt/alt/php-fpm85/usr/bin/php -n -v
```
Both fail with `Unable to start pcre module`, even with `-n` (without loading php.ini).
PHP 8.4 additionally reports a duplicate `mbstring` warning, but the fatal PCRE error is common to both versions.
So, although the patched versions are now available in the selector, **the resulting PHP installations are unusable on my server**.
Has anyone else experienced this issue with the latest CWP PHP-FPM builds on AlmaLinux 8?
Could the CWP team please investigate the compilation process?
Thanks!
27
CentOS-WebPanel Bugs / Re: [Security] Critical PHP RCE vulnerabilities — patched PHP versions unavailable i
« Last post by Wonder on October 22, 2026, 09:10:41 AM »Thanks, overseer! 😊
I wasn't aware of Sandeep's php-manager until you mentioned it, and it looks really promising!
As always, thank you so much for sharing your knowledge and helping us out. I really appreciate it!
Cheers!
I wasn't aware of Sandeep's php-manager until you mentioned it, and it looks really promising!
As always, thank you so much for sharing your knowledge and helping us out. I really appreciate it!
Cheers!
I'm here; I'm mostly watching the other main PHP thread (started by my dear friend djprmf).
I implemented Sandeep's php-manager last night and built the newest versions of 8.3 and 8.5 today after they were released.
https://www.alphagnu.com/topic/633-standalone-cwp-php-cli-build-manager-build-php-7485-php-fpm-selector-switcher-and-pie-extensions/
28
PHP / Re: Update your PHP ASAP 🚨
« Last post by djprmf on October 22, 2026, 09:10:20 AM »Update your CWP to the lastest and you will get the new PHP versions. From 8.2 to most recent ones.
Good then
But there is still the internal cwp PHP that is 7.x...
29
Information / Re: CWP Version: 1.21 and latest PHP vulnerabilities
« Last post by zakrpa on October 22, 2026, 09:07:25 AM »there are new builds inside php fpm options
30
PHP / Re: Update your PHP ASAP 🚨
« Last post by kandalf on October 22, 2026, 09:05:16 AM »Update your CWP to the lastest and you will get the new PHP versions. From 8.2 to most recent ones.
