Join the community today
Register Now

Beta Branch backport PHP 7.4.26 security fix to PHP 5.6, 7.0, 7.1, 7.2 EOL in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Nov 17, 2021.

  1. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    12:27 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
  2. Pasta

    Pasta New Member

    14
    2
    3
    Aug 3, 2021
    Ratings:
    +6
    Local Time:
    10:27 AM
    Nginx 1.21.x
    MariaDB 10.4
    I know this is old but i have a question @eva2000 , would you still backport security fixes when php 7.4 goes eol? trying to gauge when i should move my stack to 8.1.
     
  3. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    12:27 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Credit goes to REMI YUM repos' PHP backported patches. I just apply them to Centmin Mod PHP. So as long as REMI does it, so will I :)
     
  4. buik

    buik “The best traveler is one without a camera.”

    2,044
    527
    113
    Apr 29, 2016
    Flanders
    Ratings:
    +1,691
    Local Time:
    4:27 AM
    Seems as Remi Collet has taken over the PHP security backport project from Microsoft.

    But beware as an end user. For example, Remi has already labeled PHP 7.3 as dead.
    So migrate up to a higher version as soon as you can.

    The biggest problem is that PHP does not have a long term version (LTS).
    As an example. Wordpress. which is very widely used and runs on PHP.
    Wordpress still doesn't fully support PHP 8.0 While active PHP 8.0 support is already going away in 9 months. There really needs to be a PHP LTS.
    In the current way it is almost impossible to keep it up.
     
  5. Pasta

    Pasta New Member

    14
    2
    3
    Aug 3, 2021
    Ratings:
    +6
    Local Time:
    10:27 AM
    Nginx 1.21.x
    MariaDB 10.4
    Yeah there should be a php lts, my head hurts thinking about having to migrate everything to 8.1 before 7.4 eol but i'll probably have some time now that i know remi will backport 7.4 fixes for some time.
     
  6. buik

    buik “The best traveler is one without a camera.”

    2,044
    527
    113
    Apr 29, 2016
    Flanders
    Ratings:
    +1,691
    Local Time:
    4:27 AM
    Yup agreed. With all due respect, that is surely one of the biggest limitations of a PHP team programmer seen, the PHP life cycle. Where usually the newest of the newest bits is preferred. It's really not like most PHP administrators don't want to migrate to the newest of the newest anymore. Sometimes it simply won't work or simply can't.
     
  7. buik

    buik “The best traveler is one without a camera.”

    2,044
    527
    113
    Apr 29, 2016
    Flanders
    Ratings:
    +1,691
    Local Time:
    4:27 AM
    Of course you can choose the PHP that comes with the distribution. '
    For example: Enterprise Linux (EL) 7.

    EL 7 comes with PHP 5.4 and presents its own unique problems.
    For example, many web software is no longer compatible with PHP 5.4*.

    Which is kind of a semi (LTS) version.
    Since it does not provide new software but back(port) fixes.