Outdated Blackfire PHP probe?

s.kroll · May 2023

Hello @ Spryker's docker/sdk team 👋
It looks like the version of the Blackfire PHP probe is outdated in some spryker/php..._-_images. In a project which uses spryker/php:8.0-alpine3.16 I get the following message in Blackfire's profileview. Looks like the old version is vulnerable to DoS attacks:

Please be aware of the following warnings:
• This profile was generated with an outdated Blackfire Probe

fsmeier · May 2023

Thank you, I reported it to the docker-sdk team and they will resolve it shortly.

s.kroll · May 2023

Awesome 🙂 Thank you

fsmeier · May 2023

Heyhey, the team just notified me that they fixed it! ✅

https://hub.docker.com/layers/spryker/php/8.1-alpine3.17/images/sha256-ea0518b2d6c8d[…]55304074ee63d9f53ef8eadd7283fe398bb227c4eccf8?context=explore

dominik.fuchs · July 2023

Hi @fsmeier , could you also update the following image ? or just create a new 7.4 alpine version with new blackfire version ? would be awesome, thx! 😁

https://hub.docker.com/layers/spryker/php/7.4-alpine3.12-RC/images/sha256-6dc112217d7547336371191a5bd81d4e619b9d1910fb2bbdcb1d5a2aad8a397a?context=explore

fsmeier · July 2023

Heyhey,
I asked the dedicated team. To be honest I dont see too much prio for this by the team since php7.4 is not supported anymore by Spryker, see https://docs.spryker.com/docs/scos/user/intro-to-spryker/whats-new/supported-versions-of-php.html#php-7

And also for the project running with php7.4 itself: You should push the customer to update since php7.4 is out of of date even for security issues https://www.php.net/supported-versions.php

Best,
Florian

dominik.fuchs · July 2023

@fsmeier You are absolutely right, there is not enough prio for the update, currently it is planned for Q3, and our spryker version is mostly 202009.0, so let's see if this will happen.. Thanks anyway!

Outdated Blackfire PHP probe?

Welcome!

Comments

Welcome!

Welcome!

Quick Links

Categories