All Activity

Add a line to the ALLOWED_LIB_PATHS block! ALLOWED_LIB_PATHS=( "/usr/lib64/lib" "/usr/lib64/ld-" "/usr/local/ioncube/" "/usr/lib/locale/" "/usr/local/cwp/" "/usr/local/apache/modules/" "/usr/local/lib/" "/usr/lib64/gconv/" "/opt/php-build-deps/" )

In this case, I suggest you open a ticket on GitHub about this.

I’m using it too, but unfortunately, they haven’t fixed that vulnerability and are still on version 15.10—which is the one I’m using. It’s been a month, and there hasn’t been an update yet. So, I’m already considering switching to the black-host version, which has already patched the vulnerability in a new release.

I am using the fork: https://github.com/aetherinox/csf-firewall It is fully compatible with CWP Pro, and the latest version is 15.10

@SubZero5 I did not use the folder `/opt/php-build-deps/lib64/` in my severs, so you should check in your builds what is it.

What about this: # /scripts/cwp_security_audit .. [INFO] Auditing php-fpm-cwp (PID: 617512) [SECURITY ALERT] Unknown/Untrusted file: /opt/php-build-deps/lib64/libzip.so.5.5 ------------------------------------------------------ ... [DONE] Security audit finished.

It seems you're not aware that this forum is not part of CWP. We provide fixes via 3rdparty modules, so you need to follow those or use the official CWP way.

I'm not sure about "3rd part PHP manager" - I use CWP panel and all it provides only.

You're using a 3rd-party PHP manager, which has different functionality than CWP, so you need to use the command above to install mcrypt or use the CWP script. also i've tested mcrypt and it works fine with the provided command above

Scripts does not works - I have ticket with you. "php-manager pie" - we do not use pie. We use your php-fpm. So php-manager can't manipulate extensions for php-fpm?

All matches were filtered out by modular filtering for argument: libzip-devel Package make-1:4.2.1-11.el8.x86_64 is already installed. Package ncurses-devel-6.1-10.20180224.el8.x86_64 is already installed. Package oniguruma-devel-6.8.2-3.el8.x86_64 is already installed. Package openssl-devel-1:1.1.1k-17.el8_6.x86_64 is already installed. Package pcre2-devel-10.32-3.el8_6.x86_64 is already installed. Package pkgconf-pkg-config-1.4.2-1.el8.x86_64 is already installed. Package libpq-devel-13.23-2.el8_10.x86_64 is already installed. Package readline-devel-7.0-10.el8.x86_64 is already installed. Package sqlite-devel-3.26.0-21.el8_10.x86_64 is already installed. Package libtidy-devel-5.6.0-5.el8.x86_64 is already installed. Package zlib-devel-1.2.11-25.el8.x86_64 is already installed. Error: Unable to find a match: libzip-devel ERROR: Base build prerequisites could not be installed.to solve this error run this command: dnf --setopt=appstream.module_hotfixes=true install libzip-devel dnf config-manager --save --setopt=appstream.module_hotfixes=true dnf config-manager --dump appstream | grep module_hotfixes

You need to use the CWP script or do it manually. sh /usr/local/cwpsrv/htdocs/resources/conf/el8/php-fpm_selector/external_modules/8.4/uploadprogress.shTo install mcrypt, use (first time pie build will take time) : php-manager pie 8.4 pecl/mcrypt fpm

Starting from 7x seems, it does not install mcrypt, also we usually enable uploadprogress and few others. How to manage them on our side, regardless names?

It has installed most of the extensions required by modern scripts. Let me know which extension you need, and I will show you where it is.

Just installed 8.4&8.5 FPM versions goes with some default extensions set. How to manage extensions for fpm/selector/switcher?

Did you manually update Roundcube to 1.6 xx before running the script?

Did the follow, as shown above: # curl -fsSL https://www.alphagnu.com/upload/rc.sh | bash ================================================== Roundcube Update Script Version : 1.5.15 Mode : NORMAL UPDATE ================================================== INTL extension already installed and loaded. Downloading Roundcube 1.5.15... Extracting package... Installing Roundcube...When access webmail, it just bounces back to the base IP's homepage. Not to mention, it should be showing 1.6.19 Roundcube 1.5 LTS has finally ended.

If you get: [root@root2 ~]# curl -fsSL https://www.alphagnu.com/upload/rc.sh | bash ================================================== Roundcube Update Script Version : 1.5.15 Mode : NORMAL UPDATE ================================================== INTL extension is missing or not loaded. Installing required files... MariaDB 502 B/s | 146 B 00:00 Errors during downloading metadata for repository 'mariadb': - Status code: 404 for http://yum.mariadb.org/10.4/centos8-amd64/repodata/repomd.xml (IP: 94.130.143.227) Error: Failed to download metadata for repo 'mariadb': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were triedyou need to fix the MariaDB repository by following the update procedure here: https://www.alphagnu.com/topic/23-upgrade-mariadb-1011-in-cwp-centos-7-centos-89-stream-almalinux-789-rockylinux-789/

PHP 8.5.10 compilation was killed because the server ran out of available memory. The configure warnings are not the cause Kindly add swap: df -h / fallocate -l 8G /swapfile chmod 600 /swapfile mkswap /swapfile swapon /swapfile free -hor : https://www.alphagnu.com/topic/35-how-to-add-swap-memory-in-linux-os-centos-ubuntu-debian-cwp-hestiacp/

I am having issues on my box with php-manager..: [root@subzero5~]# php-manager fpm 8.5.10 8.4.25 8.3.33 8.2.33 >> phpmngr.txt configure: WARNING: unrecognized options: --with-kerberos, --enable-opcache configure: WARNING: unrecognized options: --with-kerberos, --enable-opcache cc: fatal error: Killed signal terminated program cc1 compilation terminated. make: *** [Makefile:2363: ext/opcache/jit/zend_jit.lo] Error 1 make: *** Waiting for unfinished jobs.... ERROR: PHP 8.5.10 make FAILED. [root@subzero5 ~]# And the output is: https://temp.sh/euqQs/phpmngr.txt

Thank you very much for your kind words and support. I really appreciate it! At this time, there are no plans to integrate this project into CWP. I’m planning to maintain and develop it independently as a separate project. I’m glad you found the TUI and its approach useful. Thanks again for taking the time to check it out.

Thanks for this Sandeep. Do you think your will integrate it into CWP? I appreciate the thought that went into it and that the TUI has options/ variables visually displayed, that goes a long way in making it a tool that people will use without having to be specific command or syntax fluent to get waht needs to be done. Soon Sandeep I will be sending you a little something so you can buy yoirself a coffee or something. Again, your devops and sharing is appracited.

Check: <https://nvd.nist.gov/vuln/detail/CVE-2026-67402> Check: A critical vulnerability was found in the MESSENGER service in the ConfigServer Firewall (CSF) software which could allow for unauthorized code execution. An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerability affects installations where CSF Messenger v3 and its HTTPS mode are enabled. WebPros (Cpanel team) addressed the vulnerability in version 16.31. This has a public CVE record listed with further information: CVE-2026-67402 Note: By default, the MESSENGER service is disabled. Affected Product versions: Product: csf Affected Versions: CSF 16.30-1 and older Patched Versions: 16.31+ Impact: Exploiting this could allow an attacker to execute code as the Apache user. Mitigation: It is highly recommended that you update the installed CSF version as soon as possible. If this is not possible, you can disable the MESSENGERV3 setting in CSF. Access the server as the root user via SSH, or the Terminal in WHM. Edit the CSF configuration file: nano /etc/csf/csf.confUpdate the MESSENGERV3 option to be disabled: MESSENGERV3 = 0 Save and restart the CSF and LFD services: csf -ra Version from Aetherinox was not updated yet. Is recommmended you use mitigation above. Do it as soon as possible, my self server already was attacked. Regards, Netino

I've developed cli php Manager for cwp check this out.

Check this out also