PHP 8.4 Upgrade

Virtualmin
1

Hi,
I am a relative newbie to Linux/Virtualmin so please be kind.
I recently underwent a security scan from a payment provider, and one the issues they raised was a PHP vulnerability. They asked me to upgrade to PHP 8.4. I installed the Remi package which is lacking mysqli.so.
I still have both PHP versions installed, but my Wordpress installation cannot use the updated PHP because of the absence of mysqli.
I have tried to install it via the terminal, but my system insists it is already installed. I assume that it refers to the 8.0.3.0 version.
Am I doing something incredibly stupid here?

SYSTEM INFORMATION
OS type and version Rocky Linux 9.5
Webmin version 2.202
Virtualmin version 7.30.4 Pro
Webserver version Apache version 2.4.62
Related packages PHP 8.0.3.0 - 8.4
2

@Pure_Baltic

should be able to do:

dnf install php84-php-mysqli

1 Like
3

First, your PHP version provided by your OS is maintained by your OS. Most security scanning folks understand that distinction if you inform them of it. And the packages provided by your OS have a changelog that includes the list of CVEs patched so you can compare it to the ones your scanning people are saying are a problem. Switching to third-party packages is usually less secure over time than using your OS vendor packages, because at some point it’ll reach EOL and won’t be maintained anymore, while you can know your OS vendor package is maintained by the vendor for the life of the OS. (It may be that 8.4 will live as long as Rocky 9, though.)

Second, if you followed our documentation for installing additional PHP versions you’ll have mysqlnd. You do not need php-mysqli. The mysqlnd package contains mysqli.

1 Like
4

Oops, I misspoke about how the packages work above (and have fixed it). If you followed our docs, you will have mysqli because it’s in the mysqlnd package for your PHP version.

e.g.:

# rpm -ql php83-php-mysqlnd-8.3.17-1.el8.remi.x86_64
/etc/opt/remi/php83/php.d/20-mysqlnd.ini
/etc/opt/remi/php83/php.d/30-mysqli.ini
/etc/opt/remi/php83/php.d/30-pdo_mysql.ini
/opt/remi/php83/root/usr/lib64/php/modules/mysqli.so
/opt/remi/php83/root/usr/lib64/php/modules/mysqlnd.so
/opt/remi/php83/root/usr/lib64/php/modules/pdo_mysql.so
1 Like
5

Someone suggested I get into this business once. Easy. Just run script. Take it for what it’s worth. They probably just stick to the script to ‘bullet proof’ themselves.

1 Like