Security PHP 8.0.28, 8.1.16, 8.2.3 Security Updates & Backported Fixes For PHP 7.2/7.3/7.4

PHP has released security & bug fix updates specifically for PHP 8.0.28, 8.1.16, and 8.2.3 (
CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662
) with backported relevant security fixes for EOL PHP 5.6/7.0/7.1/7.2/7.3/7.4 versions. For Centmin Mod 124.00stable and 130.00beta01, you can update to those versions if you haven't already. Ensure that you run cmupdate command to update your Centmin Mod local server code BEFORE you run the centmin.sh menu option 5 to update their PHP versions.

PHP Releases

• PHP 8.2.3 - latest newest PHP major branch with the best performance.
• PHP 8.1.16 - latest newest PHP major branch with the best performance. Centmin Mod tests at PHP 8.1.0 vs 8.0.13 vs 7.4.26 vs 7.3.33 vs 7.2.34 Benchmarks
• PHP 8.0.28 - latest newest PHP major branch with the best performance. Centmin Mod tests at PHP 8.0 vs 7.4 vs 7.3 vs 7.2 vs 7.1 vs 7.0 (PHP-FPM) Benchmarks.
• PHP 7.4.33 - last release in PHP 7.3 branch - no more bug fixes or security updates. See PHP 7.4 End Of Life November 2022. If you're still using PHP 7.4.33, run cmupdate and re-run centmin.sh menu option 5 to recompile PHP 7.4.33 with backported security patch fixes.
• PHP 7.2.34 - last release in PHP 7.2 branch - no more bug fixes or security updates. If you're still using PHP 7.2.34, run cmupdate and re-run centmin.sh menu option 5 to recompile PHP 7.2.34 with backported security patch fixes.
• PHP 7.1.33 - last release in PHP 7.1 branch - no more bug fix or security updates. If you're still using PHP 7.1.33, run cmupdate and re-run centmin.sh menu option 5 to recompile PHP 7.1.33 with backported security patch fixes. Update: backported security fixes are available for EOL PHP 5.6/7.0/7.1/7.2/7.3/7.4 versions.
• PHP 7.4.33, 7.3.33, 7.2.34, 7.1.33, 7.0.33 & 5.6.40 are EOL as security and maintenance updates have ended. However, I have backported PHP 8.0 security fixes to PHP 5.6, 7.0, 7.1, 7.2, 7.3 and 7.4 branches for Centmin Mod 124.00stable/130.00beta01 and newer branches.

PHP Change logs for

• PHP 8.2.3 php/php-src
• PHP 8.1.16 php/php-src
• PHP 8.0.28 php/php-src

Updating PHP On Centmin Mod LEMP Stacks

• If you're on Centmin Mod 123.08stable and want PHP 7.1, 7.2, 7.3, 7.4, 8.0, or 8.1 support, you will need to update your server from Centmin Mod 123.08stable to either 124.00stable and 130.00beta01 first. If you want PHP 8.2 support only Centmin Mod 130.00beta01 will support that version.
  
  Code (Text):

  --------------------------------------------------------
         Centmin Mod Updater Sub-Menu           
  --------------------------------------------------------
  1). Setup Centmin Mod Github Environment
  2). Update Centmin Mod Current Branch
  3). Update Centmin Mod Newer Branch
  4). Exit
  --------------------------------------------------------
  Enter option [ 1 - 4 ] 3
  --------------------------------------------------------
  

• For Centmin Mod 124.00stable or 130.00beta01 and newer, first update to latest version code via SSH command = cmupdate (same equivalent to centmin.sh menu option 23 submenu option 2 method). Then run centmin.sh menu option 5 to update to either PHP versions 8.2.3, 8.1.16, 8.0.28 or 7.4.33 . Example output from cmupdate SSH command run:
  
  Code (Text):

  cmupdate
  No local changes to save
  Updating 5d236f7..4ecd611
  Fast-forward
   centmin-cli.sh                          |   2 +-
   centmin.sh                              |   2 +-
   inc/php_patch.inc                       |   6 ++--
   installer80-gitlab.sh                   |   2 +-
   installer80.sh                          |   2 +-
   installer81-gitlab.sh                   |   2 +-
   installer81.sh                          |   2 +-
   installer82-gitlab.sh                   |   2 +-
   installer82.sh                          |   2 +-
   patches/php/php7234-81744.patch         | 190 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php7234-81746.patch         | 100 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php7234-cve-2023-0662.patch | 148 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php7331-81744.patch         | 190 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php7331-81746.patch         | 100 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php7331-cve-2023-0662.patch | 148 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php742-81744.patch          | 188 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php742-81746.patch          |  98 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
   patches/php/php742-cve-2023-0662.patch  | 143 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   18 files changed, 1316 insertions(+), 11 deletions(-)
   create mode 100644 patches/php/php7234-81744.patch
   create mode 100644 patches/php/php7234-81746.patch
   create mode 100644 patches/php/php7234-cve-2023-0662.patch
   create mode 100644 patches/php/php7331-81744.patch
   create mode 100644 patches/php/php7331-81746.patch
   create mode 100644 patches/php/php7331-cve-2023-0662.patch
   create mode 100644 patches/php/php742-81744.patch
   create mode 100644 patches/php/php742-81746.patch
   create mode 100644 patches/php/php742-cve-2023-0662.patch
  No local changes to save
  Already up-to-date.
  

• If you are on Centmin Mod 123.08stable and concerned about losing customisations when you upgrade to Centmin Mod 124.00stable or 130.00beta01, read this guide on how to upgrade and keep most of your customisations at How to upgrade Centmin Mod + backing up customisations.

Centmin Mod 130.00beta01 PHP Update Example

Code (Text):

--------------------------------------------------------
     Centmin Mod Menu 130.00beta01 centminmod.com   
--------------------------------------------------------
1).  Centmin Install
2).  Add Nginx vhost domain
3).  NSD setup domain name DNS
4).  Nginx Upgrade / Downgrade
5).  PHP Upgrade / Downgrade
6).  Option Being Revised (TBA)
7).  Option Being Revised (TBA)
8).  Option Being Revised (TBA)
9).  Option Being Revised (TBA)
10). Memcached Server Re-install
11). MariaDB MySQL Upgrade & Management
12). Zend OpCache Install/Re-install
13). Install/Reinstall Redis PHP Extension
14). SELinux disable
15). Install/Reinstall ImagicK PHP Extension
16). Change SSHD Port Number
17). Multi-thread compression: zstd,pigz,pbzip2,lbzip2
18). Suhosin PHP Extension install
19). Install FFMPEG and FFMPEG PHP Extension
20). NSD Install/Re-Install
21). Data Transfer (TBA)
22). Add Wordpress Nginx vhost + Cache Plugin
23). Update Centmin Mod Code Base
24). Exit
--------------------------------------------------------
Enter option [ 1 - 24 ] 5

Code (Text):

PHP Upgrade/Downgrade - Would you like to continue? [y/n] y

----------------------------------------------------------------
Install which version of PHP? (i.e. 7.3.33, 7.4.33, 8.0.28, 8.1.16, 8.2.3, NGDEBUG)
PHP 7.x/7.1.x/7.2.x/7.3.x is GA Stable but still may have broken PHP extensions.
NGDEBUG is PHP 8.3 dev builds minus incompatible PHP extensions
----------------------------------------------------------------

Current PHP Version: 8.1.13
Latest PHP Version Installable: 8.1.16

Enter PHP Version number you want to upgrade/downgrade to: 8.1.16

Do you still want to continue? [y/n] y

----------------------------------------------------------------
existing php.ini will be backed up at /usr/local/lib/php.ini-oldversion_140223-233123
----------------------------------------------------------------

-----------------------------------------------------------------------------------------
Detected PHP 8.1 branch.
You can compile Zend OPcache (Zend Optimizer Plus+) support
as an alternative to using APC Cache or Xcache cache.
But Zend OPcache only provides PHP opcode cache and
DOESN'T do data caching, so if your web apps such as Wordpress,
Drupal or vBulletin require data caching to APC or Xcache,
it won't work with Zend OPcache.

-----------------------------------------------------------------------------------------
Do you want to use Zend OPcache [y/n] ? y

Code (Text):

php -v
PHP 8.1.16 (cli) (built: Feb 15 2023 00:04:39) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.1.16, Copyright (c) Zend Technologies
    with Zend OPcache v8.1.16, Copyright (c), by Zend Technologies

with Argon2 hash algorithm support and libsodium PHP extension

Code (Text):

php -r 'print_r(get_defined_constants());' | grep -i argon
    [PASSWORD_ARGON2I] => argon2i
    [PASSWORD_ARGON2ID] => argon2id
    [PASSWORD_ARGON2_DEFAULT_MEMORY_COST] => 65536
    [PASSWORD_ARGON2_DEFAULT_TIME_COST] => 4
    [PASSWORD_ARGON2_DEFAULT_THREADS] => 1
    [PASSWORD_ARGON2_PROVIDER] => standard
    [SODIUM_CRYPTO_PWHASH_ALG_ARGON2I13] => 1
    [SODIUM_CRYPTO_PWHASH_ALG_ARGON2ID13] => 2
    [SODIUM_CRYPTO_PWHASH_STRPREFIX] => $argon2id$

Code (Text):

php --ri sodium
sodium
sodium support => enabled
libsodium headers version => 1.0.18
libsodium library version => 1.0.18

Discussions:

• PHP 8.2.3
• PHP 8.1.16
• PHP 8.0.28

---

 

Update: backported security fixes have also now been applied to EOL PHP 5.6/7.0/7.1 as well as previously mentioned 7.2/7.3/7.4 versions for both Centmin Mod 124.00stable and 130.00beta01 branches.