I installed a new version of PHP, but security scans still show its out of date

jpuretz@tk20.com · 05-21-2008, 10:24 AM

I seem to have successfully installed php 5.2.6 on my server. I installed from an RPM. when I do php -i, It shows php 5.2.6 but when I scan the server, it says the php is still out of date and older that php 5.1.5. I deleted all the old files from the old php installation, I can't figure out what hasn't been updated. Please help?

Thanks,
Jackie

TB0ne · 05-21-2008, 12:42 PM

Did you restart the service after the update??? If not, the old one is still running. Try "/etc/init.d/apache2 restart" as root, then see if it comes up with the new version.

tanveer · 05-21-2008, 11:16 PM

Run #updatedb

abefroman · 05-21-2008, 11:22 PM

What does the command line say?
php -v

tanveer · 05-21-2008, 11:34 PM

sorry clicked twice.

jpuretz@tk20.com · 05-22-2008, 04:43 PM

ok, when I do php -v it gives 5.2.6, btu then I do a nessus scan and it says I have a vulnerability because my php version is lower than 5.2.6! I installed that version on purpose so that it would not see that as a vulnerability. It also goes on to say that the version is lower than 5.2.5 then 5.2.4 etc.

i did updatedb, then I did a scan. no good.