Skip to content
Register

PHP versions lag by 6 months

Reviews by steveipw 5 replies 549 views
steveipw

Member OP

#1

Running a few WordPress sites on GreenCloudVPS shared. Noticed they are still on PHP 8.1.28 when 8.1.34 patched a CVE with CVSS 9.8 last month. Six months behind on security releases is not acceptable for production.

For that money you get:

  • 2 vCPU
  • 4GB RAM
  • 1TB RAID-6 HDD (Samsung PM893, not bad)
  • But PHP from January

I opened a ticket. Polite. No threats. Just asking for a timeline. Will update if they respond.

zfs send | zfs receive. repeat.
Fritz48

Member

Datenschutz First

#2

As far as I know, GreenCloudVPS operates their shared infrastructure from a single jurisdiction without clear data processing agreements. The PHP lag is a symptom, not the disease. To be precise, their terms do not specify patch SLAs at all. This is relevant under GDPR if you process any EU data; you cannot demonstrate adequate technical measures with known unpatched interpreters.

Neuland. Aber schnell.
Doug

Member

New Jersey

#3

My clients run premium WordPress stacks and I always steer them to premium support tiers. For this kind of thing I just open a premium support ticket and let the engineers handle it. The shared tier is not really meant for clients who need bleeding edge.

grabs popcorn, checks /r/drama
RAJ

Member

#4

Oh nooo hosty bebe server needs php huggies 🥺 my smol vps on CloudCone runs 8.3 from debian backports, was super easy, no compile needed. Shared hosty is always grumpy old man tho

your margin is my opportunity
marchhopper

Member

4 #5
steveipw said:
Six months behind on security releases is not acceptable for production

I maintain several machines running PHP-FPM with automated patch deployment via Ansible; the lag described here is a business decision, not a technical limitation. Shared hosting machines can be cycled overnight if the provider values security over convenience. I would migrate to infrastructure you control. -- Marcus

HO

Member

#6

Which OS are they running, I wonder if it's RHEL

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft