We were using the CentOS 5 testing repo on dev.centos.org to update our webservers' PHP to 5.2. However, we've just tried building a new machine lately and found that the repo seems to be empty. Is this a temporary fault, or has it gone away now that CentOS 6 is out?
If it has gone away, where can I grab PHP 5.2 packages from?
Thanks.
On 03/13/2012 07:58 PM, Spiro Harvey wrote:
We were using the CentOS 5 testing repo on dev.centos.org to update our webservers' PHP to 5.2. However, we've just tried building a new machine lately and found that the repo seems to be empty. Is this a temporary fault, or has it gone away now that CentOS 6 is out?
If it has gone away, where can I grab PHP 5.2 packages from?
Those php-5.2.x rpms were unmaintained and full of security issues, so they were removed.
You likely do not want any of the RPMs that were there, though I do have some of them on our build server.
I would HIGHLY recommend that you either use the 5.1.6 security patched c5 main tree php ... OR ... use the php53 from c5.
If you absolutely HAVE to have 5.2.x, I would recommend these:
http://rpms.famillecollet.com/
(he has a 5.2.17 version, the latest 5.2.x version)
I am pretty sure that they (php.net) are not releasing security updates for the 5.2.x series any more.
Therefore, your best bet is to use either the 5.1.6 version from c5 (Red Hat backports security updates to this, so from a security standpoint it is better than 5.2.17) ... OR ... use the php53 from c5.
Am 14.03.2012 02:46, schrieb Johnny Hughes:
If you absolutely HAVE to have 5.2.x, I would recommend these:
http://rpms.famillecollet.com/
(he has a 5.2.17 version, the latest 5.2.x version)
I am pretty sure that they (php.net) are not releasing security updates for the 5.2.x series any more.
Therefore, your best bet is to use either the 5.1.6 version from c5 (Red Hat backports security updates to this, so from a security standpoint it is better than 5.2.17) ... OR ... use the php53 from c5.
Unfortunately it seems that PHP code written for 5.2 won't necessarily run on either 5.1 or 5.3. I'm not a PHP expert myself but my PHP-savvy colleagues and customers unanimously tell me so. So what's a poor web server admin to do? I am doomed to keep around one webserver with PHP 5.1, one with PHP 5.2 and one with PHP 5.3, only hoping one of them will have been deserted by the time PHP 5.4 is released.
Hi,
On Thu, Mar 15, 2012 at 12:17 AM, Tilman Schmidt t.schmidt@phoenixsoftware.de wrote:
Unfortunately it seems that PHP code written for 5.2 won't necessarily run on either 5.1 or 5.3. I'm not a PHP expert myself but my PHP-savvy colleagues and customers unanimously tell me so. So what's a poor web server admin to do? I am doomed to keep around one webserver with PHP 5.1, one with PHP 5.2 and one with PHP 5.3, only hoping one of them will have been deserted by the time PHP 5.4 is released.
The Rackspace IUS repo provides PHP 5.2 packages. See docs how to use it:
http://iuscommunity.org/Docs/ClientUsageGuide#Upgrading_Stock_RHEL_Packages_...
I am running their php 5.2 on one of my centos5 servers without no probs. I upgraded from the php in the testing repo.
Best, Peter
Those php-5.2.x rpms were unmaintained and full of security issues, so they were removed. You likely do not want any of the RPMs that were there, though I do have some of them on our build server. I would HIGHLY recommend that you either use the 5.1.6 security patched c5 main tree php ... OR ... use the php53 from c5. If you absolutely HAVE to have 5.2.x, I would recommend these:
Thanks. Yeah, the problem we've got is that we need to build some test recovery boxes exactly the same as the live servers, so sourcing new packages from external repos won't cut it unfortunately.
Looks like we'll have to upgrade the lot and hope for the best. This time, I'll put any testing packages we use in our own repos. Once bitten, twice paranoid. :)
Cheers
On Fri, Mar 16, 2012 at 01:22:45PM +1300, Spiro Harvey wrote:
Looks like we'll have to upgrade the lot and hope for the best. This time, I'll put any testing packages we use in our own repos. Once bitten, twice paranoid. :)
Or don't use "testing" packages on production boxes in the first place.
It's far too easy to let such packages get stale and out of date and subject yourself to security vulnerabilities.
IUS has had a maintained php-5.2 out for a long time now, there is really no reason or excuse to have been using the years out of date junk that was in c5-testing.
John
-
John R. Dennison -
Johnny Hughes -
Peter Peltonen -
Spiro Harvey -
Tilman Schmidt