PHP 5.3.3 & 5.2.14 released

rrf · #1 07-22-2010, 11:15 AM

Important point:

Quote:

Originally Posted by php

PHP 5.2.14 Released!

[22-Jul-2010]
The PHP development team would like to announce the immediate availability of PHP 5.2.14. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related.

This release marks the end of the active support for PHP 5.2. Following this release the PHP 5.2 series will receive no further active bug maintenance. Security fixes for PHP 5.2 might be published on a case by cases basis. All users of PHP 5.2 are encouraged to upgrade to PHP 5.3.

via http://php.net/

geckoday · #2 07-22-2010, 11:52 AM

Thanks for the heads up rrf.

For those of you whose servers are in scope for your PCI-DSS assessment this means you must upgrade. Its unclear whether or not this would be classed as a critical security patch so installing within the 1 month requirement for critical security patches would be prudent. If you are running PHP 5.2 then this means you need to upgrade to 5.3 pretty quickly. I think you could make a case for going to 5.2.14 within 1 month and then to 5.3.3 within the next month. But thats about it for 5.2 since there is no guarantee of future security patches.

bigredseo · #3 07-22-2010, 01:27 PM

HackerGuardian (Comodo) is already sending out the notices to users saying that they'll be out of PCI Compliance in 7 days if they are not updated. I expect to see a rush of users needing that X-Cart PHP 5.3 patch

EDIT NOTE: I mistakenly said HackerSafe (which was bought by ScanAlert which was bought by McAfee). I've edited it to say HackerGuardian (Comodo)

balinor · #4 07-22-2010, 03:05 PM

Yea, unfortunately that php 5.3 patch only works on the 'stable' (i.e. latest) version of each branch. For example, I tried the 4.1.12 patch on a 4.1.8 cart and it was a no go. Going to start a new thread for people to post solutions to this issue - need a central clearing house of patches for each version.

balinor · #5 09-29-2010, 04:25 AM

Here's another fun problem - Plesk doesn't run on PHP 5.3 yet. Anyone heard anything about when that is going to be addressed? I'm a big Plesk fan and don't want to switch to Cpanel

bigredseo · #6 09-29-2010, 07:12 AM

As far as I know the hosting platform that QualiTeam operates on for their own hosting company is operating under Plesk. Myself, I'm a cPanel guy, but I remember seeing a few people on WebHostingTalk talking about doing a custom php build in Parallels (Plesk), but it had to be on the newer version of their software.

geckoday · #7 09-29-2010, 07:22 AM

From what I have read you can run PHP 5.3 on Plesk for your applications (e.g. X-Cart) but not for the control panel. Sound like they are using an encoder that isn't compatible with PHP 5.3 for the CP. They are two different PHP installs so its possible to go to PHP 5.3 for X-Cart and leave Plesk running PHP 5.2.x. Now that defeats the PCI requirements and Parallels just suggests to hide the php version using expose_php=off in the php.ini to pass scans.

http://forum.parallels.com/showthread.php?t=92192

timbrrr · #8 09-29-2010, 09:22 AM

Quote:

Originally Posted by balinor

Here's another fun problem - Plesk doesn't run on PHP 5.3 yet. Anyone heard anything about when that is going to be addressed? I'm a big Plesk fan and don't want to switch to Cpanel

Have you considered the atomicturtle repositories for doing this? So far I've had no probs with running php- 5.3.3

JWait · #9 03-25-2011, 09:05 AM

I just received notice today that my hosting company (EWD) that will be switching to PHP 5.3 shortly. What problems can I expect, if any, while using x-cart 4.2.3 and 4.1.11?

bigredseo · #10 03-25-2011, 09:09 AM

4.1 you'll need to patch. I believe the 4.2.x is already PHP 5.3 compatible.

You can get the patch from inside the File Area in the members area.