Faster php updates, bugfixes

AdamM

Hi
Could the enhance team consider releasing more frequent minor fixes?
I currently mean exactly php versions
For example, php version 8.2.3 is already available and our servers are still using 8.2.1

In version 8.2.3 fixed 3 cve.
Core:
Fixed bug #81744 (Password_verify() always return true with some hash). (CVE-2023-0567)
Fixed bug #81746 (1-byte array overrun in common path resolve code). (CVE-2023-0568)
SAPI:
Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)

It also depends on the security of our servers and customer sites
Regards

Adam

We'll release new php builds with the next appcd update (this week) which will be applied automatically. We're working on a way to release these updates faster.

AdamM

Adam Great! Thx Enhance team!

Adam

If you would like to apply the new PHP versions now, log in to your server with SSH and as root (or with sudo) run /usr/sbin/chrootbuilder.

This will take effect the next time each PHP container for each website is restarted.

AdamM

Adam
Thx. But I guess I wait until the official release.

AdamM

Hi.
PHP 8.2.4 and 8.1.17 is available from 16 March

AdamM

PHP - 8.2.7, 8.1.20, 8.0.29 is available.
I run /usr/sbin/chrootbuilder but the update has not been made.

DracoBlue

In the panel "plesk" I already have php 8.1.19 and 8.2.6

Adam

We will release updated PHP packages after the 9.4.0 core update.

AdamM

Adam
It is currently version 8.7.0 Enhance and PHP is still 8.2.7 🙁

Adrien

AdamM I thought 8.2.9 was the latest stable release published on 16 Aug 2023.

Where did you find:

AdamM version 8.7.0

AdamM

Adrien
A small mistake, I meant Enhance version 9.7.0