FreePBX 14 php 5.6.36 vulnerability

srcfreepbx · January 22, 2019, 8:43pm

Hi,
I’m getting flags from my nessus vulnerability scanner for my FreePBX 14 about php 5.6.36, regarding CVE-2018-19935 and CVE-2018-19158. Recommended action is to upgrade to php >= 5.6.39, I’m wondering if this is something that should be done manually, or will the upgrade come through official channels.
Anyone else having the same issue?

Thanks

sorvani · January 23, 2019, 1:07am

Run yum update You will upgrade to php5.6.40

or

srcfreepbx · January 23, 2019, 2:39am

Lol, thanks for the news! That must have been released tonight, because update was not available to me this afternoon.

Now I wish I had more patience before engaging with my security office…

srcfreepbx · January 23, 2019, 2:40am

Screenshot after checking for updates:

tm1000 · January 23, 2019, 4:26am

Yes! I built it after reading this thread. Enjoy!

(Now I just have to get time to build asterisk…)

sorvani · January 23, 2019, 4:58am

Sneaky, sneaky

srcfreepbx · January 23, 2019, 2:36pm

Too bad I can only give you one like!

system · January 30, 2019, 2:36pm

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.