Here at Oro, we constantly look to use the latest technologies to ensure our customers have the best product experience possible. We also strive to keep our Community posted on all significant changes and today, we announce our products will be upgraded to the new PHP security release.
Why Upgrade to a Newer PHP Version
Since PHP recently issued a series of releases containing important security fixes, all PHP users have been strongly encouraged to upgrade their current PHP installations to the latest security releases. These versions introduce many critical security improvements and bug fixes.
The PHP versions to be upgraded are PHP 7.1 (all versions below 7.1.17, for the complete list of fixes, click here), PHP 7.0 (all versions below 7.0.30, fixes), and PHP 5.0 (all versions below 5.6.36, fixes).
PHP Upgrade for Oro Customers
We’ve thoroughly tested all recent versions of OroPlatform, OroCRM, and OroCommerce starting from version 2.0 and above for compatibility with the enhanced PHP versions. Our Team has detected neither issues with backward compatibility nor vulnerabilities within the Oro products related to the PHP bug fixes.
We offer the following upgrade scenarios for our Oro users:
- All on-premise Oro customers are recommended to upgrade their production environments to one of the following PHP versions using official download links: 7.1.17, 7.0.30 or 5.6.36.
- Production environments for the OroCloud customers have already been upgraded by our team to PHP versions 7.1.17, 7.0.30, and 5.6.36 respectively.
We look forward to providing our Community more information about new product updates and enhancements so stay tuned to our blog!
