bug in SuHosin 0.9.36 with PHP 5.6 : how to upgrade ?

[bidouilleur]

according to this thread (and I do have a failing script indeed) suhosin seems to have a major bug.

I saw the phpextensionmgr but it installs the 0.9.36 version and not the latest 0.9.38

I'm not an expert and since I know Cpanel has it's reasons and customs installs, I'm not going to 'test' how to update it manually on an active server

Is this bug known to Cpanel and will it be solved quickly ? (I mean few days)
If not, how do I proceed to upgrade suhosin to the non buggy version without breaking apache ?

many thanks for your support/help

 

[bidouilleur]

sorry for bumping this up

but do I have to consider that Cpanel decided to abandon suhosin ? Why ever bothered to bring it back if you don't update it ?

 

[cPanelMichael]

Hello

Internal case ZC-1365 is open to address the need for Suhosin 0.9.38. There's currently no specific time frame to offer on it's implementation, but I will ensure this thread is updated with more information as it becomes available.

Thank you.

 

[bidouilleur]

thanks

 

[cPanelMichael]

To update, the release of the new Suhosin version to EasyApache 3 is tentatively scheduled for this week, but there's no specific time frame we can offer. You can follow the progress at:

Suhosin Update to 0.9.38

Keep in mind that EasyApache 4 does not currently support Suhosin. You can vote and add feedback to that feature request at:

Suhosin for PHP in EasyApache 4 (EA4)

Thank you.

 

[likudio]

You can compile and include Suhosin extension for all the versions of PHP you have installed on your server. (yes, for EA4 as well ).
Download sources from: Download .

wget [source link]
tar xvf [the-tar-file]
cd [the-tar-directory]
/opt/cpanel/ea-php[XX]/root/usr/bin/phpize
./configure --with-php-config=/opt/cpanel/ea-php[XX]/root/usr/bin/php-config
make
make install
(optional) make test

After that, just enable the suhosin.so extension in your local.ini file, for each version: [ extension=suhosin.so ].

Seems that a version of Suhosin for PHP7 is also available.

Regards,
A.