Upgrade to PHP 5.6.25 on CentOS7

2 posts / 0 new
Last post
#1 Wed, 11/23/2016 - 12:47
Lisandro1987

Upgrade to PHP 5.6.25 on CentOS7

Hi there,

I installed Virtualmin on CentOS7. I installed PHP 5.6 with the following commands:

# yum install scl-utils
# wget -Uvh https://www.softwarecollections.org/repos/rhscl/rh-php56/epel-7-x86_64/noarch/rhscl-rh-php56-epel-7-x86_64.noarch.rpm
# yum install rhscl-rh-php56-*.noarch.rpm
# yum install rh-php56
# yum install rh-php56-php-mysqlnd rh-php56-php-gd rh-php56-php-xmlrpc rh-php56-php-bcmath rh-php56-php-mbstring rh-php56-php-pecl-xdebug rh-php56-php-pspell rh-php56-php-soap rh-php56-php-intl rh-php56-php-pecl-jsonc-debuginfo rh-php56-php-recode
# scl enable rh-php56 bash
# ln -s /opt/rh/rh-php56 /opt/rh/php56

But it installed PHP 5.6.5 and I need 5.6.24 for a PCI Compliance (Security Standards).

Is there any way to install it? Or have I to uninstall Virtualmin?

Thanks!

Regards, Lisandro.

Thu, 11/24/2016 - 07:38
hescominsoon

Many pci auditors do not know anything but regulations. What you have to do is educate the auditor about centos. The version number is not the means of security evaluation on an Enterprise distribution like Centos. virtualmin does not provide the php packages Centos does. Despite the "low" version number RedHat(which Centos is based off of) does something called backporting. All security fixes from the latest 5.6.x are backported into whatever version is being presented. The pci auditor needs to research Centos(by extension RedHat), and you do as well, so you and the auditor can be fully informed as to how enterprise Linux works. Otherwise you will continue to get dinged on PCI for no reason other than a meaningless version number.

Topic locked