PHP update for spiceworks

stevenmelnichuk6918 · 2019-04-02T18:43:48.000Z

Hey there, I was using a fairly recent version of Spiceworks (downloaded about 2 months ago), however, my Risk Management software reported that it was a high risk server because Spiceworks was using an old version of PHP.

Is there plans to upgrade to the latest version, or can we upgrade the PHP version ourselves?

@app-team

Rod-IT · 2019-04-02T18:58:11.000Z

This has been covered a while ago, there are two known vulnerabilities (but possibly in Apache not PHP, I dont remember), none of which should have any major impact to you - unless you publish it externally, then I’ll advise you put it behind a reverse proxy.

None of the fixes will be added to 7.5 version of SW and patching it yourself is not supported.

Until the next version is released there is nothing you can do, unless you choose to do this manually and make your setup unsupported.

Rod-IT · 2019-04-02T18:59:51.000Z

For my own information though, what are you/they scanning it with, Nessus does not report this

Robert5205 · 2019-04-02T19:17:01.000Z

No, no plans to fix 7.x.

dbeato · 2019-04-03T04:34:07.000Z

Information below:

State of Desktop app v8.0 Spiceworks

Hi everyone, we’ve been working hard on our Inventory products, but have not provided a recent update on the status of the Inventory 8.0 beta or the general future of the Desktop app (Help Desk and Inventory). Below are details around where both are headed, and how it ties into what we’re working on for Help Desk and Inventory products. Inventory 8.0 beta The 2017 beta releases of Inventory 8.0 made it apparent that application performance would be a challenge for both Inventory and Help Desk.…

dbeato · 2019-04-03T04:34:35.000Z

Also please see this

Updating the PHP version used by Spiceworks Spiceworks Support

Hi The PHP version used by Spiceworks isnt a secure version. How would i go about updating this? Thanks

dbeato · 2019-04-03T04:36:22.000Z

And this, use at your own risk

https://community.spiceworks.com/how_to/160466-how-to-upgrade-apache-to-2-4