Nagios Support Forum

Good afternoon, all.

According to an in-house vulnerability remediation report, we must upgrade PHP on our two Nagios servers from version 5.4.16 to version 7.3.8. According to an item here in the support forum (https://support.nagios.com/forum/viewto ... 16&t=54569), “Nagios only supports up to PHP 7.2”.

I'm not sure how old this information is, so I thought I'd check to see what version of PHP is currently supported and what would be the steps to upgrade?

Thanks in advance for your usual quick reply.

Steve

Hi Steve,

That information is pretty recent and we haven't QA tested XI on 7.3.8. What distribution are you using? Please let me know.

If you mean which Linux distribution, it's CentOS Linux release 7.7.1908 (Core). Nagios XI version is 5.6.7.

The solution in https://support.nagios.com/forum/viewto ... 16&t=54569 appears to include steps to upgrade Nagios XI 5.6.3. If I could possibly get updated instructions to update PHP, assuming the latest version of Nagios XI is already installed, that would be great.

Thanks.

Steve

Hi Steve,

I've discussed this with one of the developers here, and Nagios XI is not compatible with php 7.3 -- only up to 7.2.

Please keep in mind that CentOS does backport security vulnerabilities, and security scans usually don't take this into account.

https://access.redhat.com/security/updates/backporting

I successfully updated PHP to version 7.2.23 using the steps here:

https://support.nagios.com/forum/viewto ... 69#p286827

tweaking the Nagios XI version number to the latest version.

I noticed when preparing to do the update that package php-mssql is not included in list of packages to be installed (comparing the list to our installed php packages). This package does not seem to be available for php72, so I proceeded without it. Shortly after doing the update, at least one MSSQL Query monitor returned an error:

[/b]

The php-pdo extension (?) is installed. So I ran
and learned that this is "obsoleted by php-pdo-dblib" and installed that instead.

So I suggest that php-pdo-dblib be added to the list of packages in the steps to update PHP.


Steve

Hi Steve,

So I suggest that php-pdo-dblib be added to the list of packages in the steps to update PHP.

Noted. Thanks for letting us know.