Urgent: PHP 7.2 in SCL not updated for very long time

[winst]

Hello,

The recent critical security update for PHP 7.2 , as documented in

https://access.redhat.com/errata/RHSA-2019:3299

I am using SCL PHP 7.2 in CentOS 7 with php-fpm (together with default PHP 5.4.16 as apache module that comes with CentOS 7), but when I check if there is updates, I noticed SCL PHP 7.2 has not been updated since 2018 Dec :

http://mirror.centos.org/centos/7/sclo/ ... /rh-php72/

I do noticed a bug is already submitted here:

https://bugzilla.redhat.com/show_bug.cgi?id=1766673

However, since there seems not much progress yet, I would like to know for now, any options I have for having latest PHP 7.2.x installed together with default PHP 5.4 in the same server? (Need both versions to coexist due to multiple hostings require diff. php version in the web server).

Thanks!
winst

[TrevorH]

As far as I know they are in progress. I did find https://buildlogs.centos.org/centos/7/s ... /rh-php72/ and that has packages dated yesterday. Those are unsigned.

[TrevorH]

I've asked that those be pushed sooner rather than later. This is a critical security issue but it does only affect people using it with nginx. If you don't use nginx then you are not affected.

[TrevorH]

yum list rh-php72\* --enablerepo=centos-sclo-rh-testing

[winst]

Thanks for the information. Hope the updates can be released ASAP....