Upgrade Linux Web App PHP to 8.4

robfeb 0 Reputation points
2025-01-16T15:01:19.4133333+00:00

Hi Community!,

We've detected lots of vulnerabilities on our Linux PHP instances, mostly related to the PHP 8.3 version.

https://www.cvedetails.com/vulnerability-list/vendor_id-74/product_id-128/version_id-1869461/PHP-PHP-8.3.9.html

https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-php-could-allow-for-remote-code-execution_2024-106

https://maikuolan.github.io/Vulnerability-Charts/php.html

User's image

https://www.php.net/downloads.php

So, we're currently stuck on version 8.3.9 and can't upgrade to the latest ones like 8.3.15. When configuring, we can only pick 8.3, and even though it's still supported, it's not helping us protect against the vulnerabilities we've found in our exposed instances.

We've tried updating things on our end, but since it's a Serverless instance, the changes don't stick.

We could switch to using a container image, but that means overhauling our entire CI/CD process (which kinda defeats the purpose of having Web Apps, right?).

Any chance there's a plan or workaround to upgrade to version 8.4 or at least the latest 8.3 versions (like 8.3.15)?

Thanks!

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,297 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.