Mister9

Active Member
Apr 28, 2010
32
1
58
cPanel Access Level
Root Administrator
When I run a "Check server security" on CSF, it gives me this strange message under Check php version.

Any version of PHP older than v7.2.* is now obsolete and should be considered a security threat. You should upgrade exclusively to PHP v7.3+:
Affected PHP versions:
7.4.33 (/opt/cpanel/ea-php74/root/usr/bin/php)

I know CSF is a separate software from CPanel but I was wondering if anybody here knew why this can be happening.
I removed all versions of PHP below 7.4 and obviously 7.4.33 is above 7.2*. Quite strange..
 
Last edited by a moderator:

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
Hey there! Just to confirm, you've removed the older versions from EasyApache, but CSF is still reporting that they are installed?

If so, you can manually confirm what is on the server with the following command, as that will show all the ea-php packages on the server:

Code:
rpm -qa | grep ea-php | sort
 

Mister9

Active Member
Apr 28, 2010
32
1
58
cPanel Access Level
Root Administrator
Hello!
Yes, this is what's going on.. I ran that search command and the results have nothing below php 7.4

ea-php74-7.4.33-1.el8.cloudlinux.1.x86_64
ea-php74-pear-1.10.13-2.el8.cloudlinux.noarch
ea-php74-php-bcmath-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-bz2-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-calendar-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-cli-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-common-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-curl-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-dba-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-devel-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-enchant-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-exif-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-fileinfo-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-fpm-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-ftp-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-gd-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-gettext-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-gmp-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-iconv-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-imap-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-intl-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-ldap-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-litespeed-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-mbstring-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-memcached-3.1.5-2.el8.cloudlinux.x86_64
ea-php74-php-mysqlnd-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-odbc-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-pdo-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-pgsql-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-posix-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-process-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-pspell-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-redis-5.3.7-1.el8.cloudlinux.x86_64
ea-php74-php-snmp-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-soap-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-sockets-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-sodium-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-tidy-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-xml-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-xmlrpc-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-php-zip-7.4.33-6.el8.cloudlinux.x86_64
ea-php74-runtime-7.4.33-1.el8.cloudlinux.1.x86_64
ea-php80-8.0.29-1.el8.cloudlinux.1.x86_64
ea-php80-pear-1.10.13-2.el8.cloudlinux.noarch
ea-php80-php-bcmath-8.0.29-1.el8.cloudlinux.x86_64
ea-php80-php-bz2-8.0.29-1.el8.cloudlinux.x86_64
ea-php80-php-calendar-8.0.29-1.el8.cloudlinux.x86_64
ea-php80-php-cli-8.0.29-1.el8.cloudlinux.x86_64
ea-php80-php-common-8.0.29-1.el8.cloudlinux.x86_64
etc...

This is strange right?
If there isn't any security concerns then I would be ok without resolving it..
 

SimpleSonic

Well-Known Member
Mar 24, 2023
186
82
103
USA
cPanel Access Level
Root Administrator
Twitter
I am able to reproduce this in CSF as well and it definitively appears to be a CSF issue when displaying "Affected PHP versions", not a cPanel issue.