Resolved How to update cURL on CentOS 7.9.2009 (Core) and Plesk Obsidian 18.0

[raphael_suporte]

I have the following warning message on my WHMCS:

"You currently have version 7.29.0 of cURL installed. This version is known to have security issues. Update to the latest cURL and make sure it is greater than: last_bad_version."

...how can I solve? Since I already tried to update the cURL by running the command - yum update curl

 

[IgorG]

Plesk does not provide the 'curl' package but depends on the 'curl' package shipped by the operating system vendor.

The only way to update the base cURL version is to use a 3rd-party repository. However, it may result in OS package manager malfunction, is not recommended by the OS vendor and should be applied at your own risk, since this operation is not managed by Plesk.

In case you still want to proceed with it, here are the steps (creating a server snapshot beforehand is strongly recommended):

• Create a city-fan.org yum repository file:
  

  # touch /etc/yum.repos.d/city-fan.repo

• Open the created file /etc/yum.repos.d/city-fan.repo in any text editor and put the content below in it:

[CityFan]name=City Fan Repo
baseurl=http://www.city-fan.org/ftp/contrib/yum-repo/rhel$releasever/$basearch/
enabled=1
gpgcheck=0

• Enable the EPEL repository:
  

  # yum install epel-release -y

• Rerun the update:
  

  # yum install curl libcurl

• Verify the version:
  

  # curl --version

• Restart all cURL dependent services:

# service sw-engine restart# service sw-cp-server restart
# service php-fpm restart
# service plesk-phpXX-fpm restart (replace XX with version)
# service httpd restart
# service nginx restart

 

[raphael_suporte]

Obrigado

 

[Hempie]

This url is not hosting the online files anymore, so how to update cURL?

 

[mow]

One should hope that for centos, like debian, security patches are backported. So that warning might be misleading.
A hint of this would be if the package is much newer than the security advisory.

 

[geomihut]

Plesk does not provide the 'curl' package but depends on the 'curl' package shipped by the operating system vendor.

The only way to update the base cURL version is to use a 3rd-party repository. However, it may result in OS package manager malfunction, is not recommended by the OS vendor and should be applied at your own risk, since this operation is not managed by Plesk.

In case you still want to proceed with it, here are the steps (creating a server snapshot beforehand is strongly recommended):

• Create a city-fan.org yum repository file:
  

  # touch /etc/yum.repos.d/city-fan.repo

• Open the created file /etc/yum.repos.d/city-fan.repo in any text editor and put the content below in it:

[CityFan]name=City Fan Repo
baseurl=http://www.city-fan.org/ftp/contrib/yum-repo/rhel$releasever/$basearch/
enabled=1
gpgcheck=0

• Enable the EPEL repository:
  

  # yum install epel-release -y

• Rerun the update:
  

  # yum install curl libcurl

• Verify the version:
  

  # curl --version

• Restart all cURL dependent services:

# service sw-engine restart# service sw-cp-server restart
# service php-fpm restart
# service plesk-phpXX-fpm restart (replace XX with version)
# service httpd restart
# service nginx restart

The URL provided is not working anymore. Do you know a different URL where I can get the update for cURL? Is anyone knows a different URL? Thank you

 

[FrancoiseL]

The URL provided is not working anymore. Do you know a different URL where I can get the update for cURL? Is anyone knows a different URL? Thank you

Also update the package version in the Plesk panel with:
plesk sbin packagemng -sdf