{"id":50470,"date":"2026-10-22T00:34:38","date_gmt":"2026-10-21T21:34:38","guid":{"rendered":"https:\/\/trueconf.com/blog\/?p=50470"},"modified":"2026-10-22T00:55:08","modified_gmt":"2026-10-21T21:55:08","slug":"security-patch-for-the-php-service-in-trueconf-server","status":"publish","type":"post","link":"https:\/\/trueconf.com/blog\/news\/security-patch-for-the-php-service-in-trueconf-server","title":{"rendered":"Security Patch for the PHP Service in TrueConf Server"},"content":{"rendered":"<p>Due to the discovery of <a href=\"https:\/\/www.php.net\/archive\/2026.php#2026-10-21-5\" target=\"_blank\" rel=\"noopener\">critical vulnerabilities<\/a> in the PHP module used by the TrueConf Server web service (all versions up to and including 5.5.7), <span style=\"text-decoration: underline;\"><strong>we strongly recommend applying the following patch<\/strong><\/span> on your PC or virtual machine running the TrueConf Web Manager service for Windows or trueconf-php for Linux.<\/p>\n<p>The release of updated TrueConf Server versions 5.5, 5.4, and 5.3 featuring a new PHP version will be announced separately in the near future.<\/p>\n<h3><b>Recommendations for Windows Server<\/b><\/h3>\n<p>1. Set <code>memory_limit=-1<\/code> in the <code>C:\\Program Files\\TrueConf Server\\php\\php.ini<\/code> file.<\/p>\n<p>2. Add the following new line to the <code>[Session]<\/code> section in the <code>C:\\Program Files\\TrueConf Server\\php\\php.ini<\/code> file:<\/p>\n<pre class=\"\">session.upload_progress.enabled = 0<\/pre>\n<p>3. Add the following lines to the <code>C:\\Program Files\\TrueConf Server\\httpconf\\opt\\rewrite.conf<\/code> file (if the file does not exist, it must be created):<\/p>\n<pre class=\"\">RewriteEngine On\r\nRewriteCond %{REQUEST_METHOD} ^(POST|PUT|PATCH)$ [NC]\r\nRewriteCond %{HTTP:Content-Type} ^multipart\/form-data [NC]\r\nRewriteRule ^ - [F]<\/pre>\n<p>4. Run the following commands:<\/p>\n<pre class=\"\">net stop TrueConfWebManager\r\nnet start TrueConfWebManager<\/pre>\n<h3><b>Recommendations for Linux<\/b><\/h3>\n<p>1. Set <code>memory_limit=-1<\/code> in the <code>\/opt\/trueconf\/server\/etc\/php\/php.ini<\/code> file.<\/p>\n<p>2. Add the following new line to the <code>[Session]<\/code> section in the <code>\/opt\/trueconf\/server\/etc\/php\/php.ini<\/code> file:<\/p>\n<pre class=\"\">session.upload_progress.enabled = 0<\/pre>\n<p>3. Add the following lines to the <code>\/opt\/trueconf\/server\/etc\/backend\/opt\/rewrite.conf<\/code> file (if the file does not exist, it must be created):<\/p>\n<pre class=\"\">RewriteEngine On\r\nRewriteCond %{REQUEST_METHOD} ^(POST|PUT|PATCH)$ [NC]\r\nRewriteCond %{HTTP:Content-Type} ^multipart\/form-data [NC]\r\nRewriteRule ^ - [F]<\/pre>\n<p>4. Run the following commands:<\/p>\n<pre class=\"\">sudo systemctl set-property trueconf-php MemoryMax=4G\r\nsudo systemctl restart trueconf-php<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Due to the discovery of critical vulnerabilities in the PHP module used by the TrueConf Server web service (all versions up to and including 5.5.7), we strongly recommend applying the following patch on your PC or virtual machine running the TrueConf Web Manager service for Windows or trueconf-php for Linux. The release of updated TrueConf [&hellip;]<\/p>\n","protected":false},"author":19,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[104],"tags":[425],"class_list":["post-50470","post","type-post","status-publish","format-standard","hentry","category-news","tag-php","wpautop"],"_links":{"self":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts\/50470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/comments?post=50470"}],"version-history":[{"count":3,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts\/50470\/revisions"}],"predecessor-version":[{"id":50475,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts\/50470\/revisions\/50475"}],"wp:attachment":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/media?parent=50470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/categories?post=50470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/tags?post=50470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}