upgrade PHP in App service to 8.1.X or 8.0.20 ?

Question

I have an App Service running on Linux with PHP 8 and all fine, but some pentesting show that the PHP version provided from Azure is highly vulnerable. IS there a way to upgrade to 8.0.20 or 8.1.X ?

Answer 1

Hello @Diego Escobar

App Service upgrades the underlying PHP runtime of your application as part of the regular platform updates. As a result of this regular update process, your application will be automatically updated to the latest patch version of PHP available in the platform..

"Once a version of PHP has reached it's end of extended support your application will be upgraded to the next recommended supported minor version.
Please read this Github repo for more details.

Briefly, you cannot upgrade minor version by yourself as upgrade process is completely managed by Azure.
If you want to use the exact PHP version in App Service please take a look into Azure Web App Custom Docker image where you can set the exact version of PHP in Docker image.

If you think your question has been answered, click "Mark as Accept Answer" if just helped click "Vote as helpful". This can be beneficial to other community members reading this forum thread.

Answer 2

@Diego Escobar , Just checking in to see if you had got a chance to see the previous response by AndriyBilous. To benefit the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer’.

Just highlighting further:

• The App Service next rollout updates has PHP 8.1.
• The best way to see the PHP version and the current phpini configuration is to call phpinfo in your app.
• Patch updates to .NET, PHP, Java SDK, or Tomcat version are applied automatically by overwriting the existing installation with the latest version.
• PHP Official Support timeline

How can I query OS and runtime update status on my instances?
App Service update cycle

• Before beginning worldwide updates, we deploy first to a private region which is not commonly accessible. Only after testing is validated there, we begin to roll out to datacenters across the globe. Our typical time for completing updates worldwide is about 10 business days, which allows us to deploy during each region’s off hours and also avoid deploying to Paired Regions at the same time (for example, East US and West US). When you are planning your app’s infrastructure for high availability and looking to deploy in multiple regions, it’s always a good idea to deploy to the paired region of your target region, since if there is a platform issue in the update, it won’t affect the paired region. After mitigating any issue, we will only then continue to the paired region, after the first is complete.