PHP UPdate

[vornado]

Good afternoon, all.

According to an in-house vulnerability remediation report, we must upgrade PHP on our two Nagios servers from version 5.4.16 to version 7.3.8. According to an item here in the support forum (https://support.nagios.com/forum/viewto ... 16&t=54569), “Nagios only supports up to PHP 7.2”.

I'm not sure how old this information is, so I thought I'd check to see what version of PHP is currently supported and what would be the steps to upgrade?

Thanks in advance for your usual quick reply.

Steve

[benjaminsmith]

Hi Steve,

That information is pretty recent and we haven't QA tested XI on 7.3.8. What distribution are you using? Please let me know.

[vornado]

If you mean which Linux distribution, it's CentOS Linux release 7.7.1908 (Core). Nagios XI version is 5.6.7.

The solution in https://support.nagios.com/forum/viewto ... 16&t=54569 appears to include steps to upgrade Nagios XI 5.6.3. If I could possibly get updated instructions to update PHP, assuming the latest version of Nagios XI is already installed, that would be great.

Thanks.

Steve

[benjaminsmith]

Hi Steve,

I've discussed this with one of the developers here, and Nagios XI is not compatible with php 7.3 -- only up to 7.2.

Please keep in mind that CentOS does backport security vulnerabilities, and security scans usually don't take this into account.

https://access.redhat.com/security/updates/backporting

[vornado]

I successfully updated PHP to version 7.2.23 using the steps here:

https://support.nagios.com/forum/viewto ... 69#p286827

tweaking the Nagios XI version number to the latest version.

I noticed when preparing to do the update that package php-mssql is not included in list of packages to be installed (comparing the list to our installed php packages). This package does not seem to be available for php72, so I proceeded without it. Shortly after doing the update, at least one MSSQL Query monitor returned an error:

Code: Select all

UNKNOWN: PDO MSSQL/DBLIB support is not installed on this server. Try adding packages php-pdo and php-mssql.
Date/Time: 2019-10-18 14:13:26

[/b]

The php-pdo extension (?) is installed. So I ran

Code: Select all

yum install php-mssql

and learned that this is "obsoleted by php-pdo-dblib" and installed that instead.

So I suggest that php-pdo-dblib be added to the list of packages in the steps to update PHP.


Steve

[benjaminsmith]

Hi Steve,

So I suggest that php-pdo-dblib be added to the list of packages in the steps to update PHP.

Noted. Thanks for letting us know.