curl system health

[user291]

Hi I see this message

 

You currently have version 7.19.7 of cURL installed. This version is known to have security issues.

 

how do i fix this and could updating my curl mess anything else up? I just upgraded from 6.3 to 7.1.1

[penguin]

If you're running CentOS/Redhat v6 then you don't need to do anything. This is the shipped version and as long as your OS is up to date then this is secure. Redhat/CentOS backport fixes into the same version, therefore this will always remain as 7.19.7

[twhiting9275]

Yeah, RH backports issues, meaning that they fix things often times without changing the actual version #. This is something that the WHMCS devs should keep in mind before creating false panic over silly things like this

[cnymike53]

I'm getting this warning in my WHMCS installation as well and I am hosted on HostGator.

 

It's safe to ignore this warning?

 

HostGator told me there was nothing I could do to update cURL since it is installed on the Shared Server.

[penguin]

It's safe to ignore as long as you are on a Redhat/CentOS v6 server and it is fully up to date - you would need to confirm that with HostGator though if you're not managing your own server. Being a shared server however has no reflection on whether or not it is being maintained and kept up to date.

[cnymike53]

I don't know if everything is up to date. But here is supposedly what is installed on the shared reseller server:

What Software and Program Versions Does HostGator Offer?

 

Shared/Reseller

Win. Shared

VPS

Dedicated

Win. Dedi.

HostGator offers a variety of software for shared and reseller servers.

 

Quick Reference

 

Apache

2.2.24 and 2.2.25

PHP

5.5, 5.6, and 7.0 (dual environment)

Perl

5.8.8

MySQL

5.5.23 or higher

JSP

Available only on dedicated and VPS

cPanel

11.40.x - auto updated to latest version

GD / Image Magic

6.6.3

Software Versions

 

All shared and reseller accounts come with:

 

Linux x86 CentOS 6 (a free version of RedHat) 64-bit Operating System

Kernel - latest stable release, updated as needed

Apache 2.2.x , (includes mod_rewrite and mod_security) in a SuExec environment

Outgoing email (SMTP) = Exim 4.x (Exim)

Incoming email (POP3 and IMAP) = Dovecot 1.x (Dovecot)

WHM 11.40.x

cPanel 11.40.x

PHP is run as CGI (not Apache/DSO) in a suPHP environment. Please see chart above for your specific server version.

Zend Optimizer 3.3.9

PEAR 1.7.x

ionCube 4.2.2

ionCube Loader 4.4.3

GnuPG 2.0.14

GD2 Library 2.0.34

openSSL 1.0.1e-fips (for PHP)

SOAP

PHP Modules - full list

phpMyAdmin 3.2.4

MySQL Database 5.5.x

Ruby 1.8.7

Ruby Gems 1.8.30

Ruby on Rails 2.3.18

cURL 7.19.x (also libcurl and PHP/CURL)

PERL 5.8.x , PCRE Library Version 7.8

Python 2.6.6 (default), 2.7.8, and 3.2.3 (Use the version number in the binary for non default versions. i.e. python2.7, python3)

ImageMagick 6.6.x

Ghostscript 8.15.x

Rsync

RoundCube 0.2b, SquirrelMail 1.4.13, Horde 3.1.7p8

Sitebuilder 4.5.0, Site Studio 1.6RC3 (upon request)

Blogs (WordPress), CMS (Drupal Hosting and Joomla), Discussion Boards (phpBB Hosting), Shopping Carts (Magento Hosting), Image Galleries, php Mailing List, Sitebuilders, Wiki Hosting

Full List of Programs

[penguin]

That's just a list of what they offer - you would need to check with them if they actually keep the packages up to date as the version numbers won't change for most of these