はじめに
Remi's RPM repositoryを利用してCentOS6にPHP-FPM5.4をインストール
親記事:PHP, PHP-FPMの各種インストール方法とEOLまとめ
参考:Remi's RPM repository
サポート
本手法で導入した場合、PHP: Supported Versions/PHP: Unsupported Branchesより、2015-09-03がEOLになると思われる。
それ以降に報告された脆弱性や不具合への対応は実施されない可能性がある。
(メンテナーの御慈悲でその後もアップデートされているが、いつまで続くかはわからない)
note
- インストール後の更新は
yum --enablerepo=remi-php54 update
LOG
インストール
# cat /etc/redhat-release
CentOS release 6.10 (Final)
# yum install -y https://rpms.remirepo.net/enterprise/remi-release-6.rpm
... 略
# yum install -y --enablerepo=remi-php54 php-fpm
... 略
==========================================================================
WARNING : PHP 5.4 have reached its "End of Life" in September 2015.
Even, if this package includes some of the important security fix,
backported from 5.5 or 5.6,
The UPGRADE to a maintained version is very strongly RECOMMENDED.
==========================================================================
... 略
php-fpm起動/停止
# service php-fpm start
Starting php-fpm: [ OK ]
# service php-fpm status
php-fpm (pid 179) is running...
# service php-fpm stop
Stopping php-fpm: [ OK ]
# service php-fpm status
php-fpm is stopped
php-fpm自動起動設定/設定解除
# chkconfig php-fpm on
# chkconfig --list php-fpm
php-fpm 0:off 1:off 2:on 3:on 4:on 5:on 6:off
# chkconfig php-fpm off
# chkconfig --list php-fpm
php-fpm 0:off 1:off 2:off 3:off 4:off 5:off 6:off
各種確認
# which php
which: no php in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin)
# which php-fpm
/usr/sbin/php-fpm
# php-fpm -v
PHP 5.4.45 (fpm-fcgi) (built: Jan 11 2019 13:55:45)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies
# yum info php-fpm
Loaded plugins: fastestmirror, ovl
Loading mirror speeds from cached hostfile
* base: ty1.mirror.newmediaexpress.com
* epel: nrt.edge.kernel.org
* extras: ty1.mirror.newmediaexpress.com
* remi-safe: ftp.riken.jp
* updates: ty1.mirror.newmediaexpress.com
Installed Packages
Name : php-fpm
Arch : x86_64
Version : 5.4.45
Release : 17.el6.remi
Size : 4.1 M
Repo : installed
From repo : remi-php54
Summary : PHP FastCGI Process Manager
URL : http://www.php.net/
License : PHP and Zend and BSD
Description : PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI
: implementation with some additional features useful for sites of
: any size, especially busier sites.
パッケージ更新状況
# rpm -q -changelog php-fpm | head -n 20
* Fri Jan 11 2019 Remi Collet <remi@remirepo.net> - 5.4.45-17
- Fix #77242 heap out of bounds read in xmlrpc_decode
- Fix #77380 Global out of bounds read in xmlrpc base64 code
* Mon Dec 10 2018 Remi Collet <remi@remirepo.net> - 5.4.45-16
- Fix #77231 Segfault when using convert.quoted-printable-encode filter
- Fix #77020 null pointer dereference in imap_mail
CVE-2018-19935
- Fix #77153 imap_open allows to run arbitrary shell commands via
mailbox parameter
CVE-2018-19158
* Fri Sep 14 2018 Remi Collet <remi@remirepo.net> - 5.4.45-15
- fix #76582: XSS due to the header Transfer-Encoding: chunked
* Thu Mar 01 2018 Remi Collet <remi@remirepo.net> - 5.4.45-14
- fix #73549: Use after free when stream is passed to imagepng
- fix #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
CVE-2016-10167
- fix #73869: Signed Integer Overflow gd_io.c