Outdated Blackfire PHP probe?

s.kroll

Hello @ Spryker's docker/sdk team 👋
It looks like the version of the Blackfire PHP probe is outdated in some spryker/php..._-_images. In a project which uses spryker/php:8.0-alpine3.16 I get the following message in Blackfire's profileview. Looks like the old version is vulnerable to DoS attacks:

Please be aware of the following warnings:
• This profile was generated with an outdated Blackfire Probe

fsmeier

Thank you, I reported it to the docker-sdk team and they will resolve it shortly.

s.kroll

Awesome 🙂 Thank you

fsmeier

Heyhey, the team just notified me that they fixed it! ✅

https://hub.docker.com/layers/spryker/php/8.1-alpine3.17/images/sha256-ea0518b2d6c8d[…]55304074ee63d9f53ef8eadd7283fe398bb227c4eccf8?context=explore

dominik.fuchs

Hi @fsmeier , could you also update the following image ? or just create a new 7.4 alpine version with new blackfire version ? would be awesome, thx! 😁

https://hub.docker.com/layers/spryker/php/7.4-alpine3.12-RC/images/sha256-6dc112217d7547336371191a5bd81d4e619b9d1910fb2bbdcb1d5a2aad8a397a?context=explore

fsmeier

Heyhey,
I asked the dedicated team. To be honest I dont see too much prio for this by the team since php7.4 is not supported anymore by Spryker, see https://docs.spryker.com/docs/scos/user/intro-to-spryker/whats-new/supported-versions-of-php.html#php-7

And also for the project running with php7.4 itself: You should push the customer to update since php7.4 is out of of date even for security issues https://www.php.net/supported-versions.php

Best,
Florian

dominik.fuchs

@fsmeier You are absolutely right, there is not enough prio for the update, currently it is planned for Q3, and our spryker version is mostly 202009.0, so let's see if this will happen.. Thanks anyway!