Nagios - CentOS 6 - Vmware Template - PHP

[klewia]

Hi All,

I recently leveraged the Vmware Template provided by the Nagios team as my production server. Regulation requires that I update and perform regular Cyber Vulnerability Assessments. I performed a CVA on the server today and found that the php version that is on the CentOS image is out of date, out of support, and has a zero day exploit available.

Given my limited interaction with Nagios thus far and mediocre comfort with Linux/CentOS what is the recommended course of action to getting this "fixed".
PHP Verison: 5.3.3
Centos Version 6.3
Nagios XI: 12R1.3
Nagios Core: 3.4.1

I understand that there might be a knowledge-base article that would answer my question, I have not found one that walks the line with Linux Support in regards to Nagios stability and am not comfortable updating PHP without feedback from the Nagios team!

Thank you!

[slansing]

Yes, unfortunately php vulnerability alerts are bound to show up now and then, please follow this thread and tailor the version numbers to your needs, it should still be current!:

http://support.nagios.com/forum/viewtop ... php#p31649

[klewia]

Thanks, I will give this a shot!