Skip to content
OrbixPanel OrbixPanel Tutorials

Patch a vulnerability (Security Advisories)

Security → Advisories turns a security notice into a one-click fix. OrbixPanel keeps a list of third-party vulnerabilities (published by Orbix Cloud), matches them against the exact versions installed on your server, and upgrades the affected software for you.

Admin/operator only — this page is never shown to tenants.

The page at a glance

  • A banner at the top: green when nothing affects you, red with a count when something does.
  • Installed software — the versions OrbixPanel detected (PHP per series, nginx, MySQL/MariaDB, Redis, Node.js).
  • A card per advisory with severity, summary, affected range, patched versions, and CVEs.

Check your exposure

  1. Open Security → Advisories.
  2. Click Sync now to pull the latest advisories and re-scan your installed versions (this also happens automatically about once a day).
  3. Affected advisories are highlighted and show exactly which installed version is at risk and the version to move to, e.g.:
    • 8.2.34 → 8.2.35 — a patch within the same series.
    • 8.1.29 → 8.2.35 — an upgrade because 8.1 is end-of-life (no patch exists).

Patch it

  1. On an affected advisory, click Upgrade now and confirm.
  2. OrbixPanel runs the upgrade server-side (updates the package, and for PHP ensures the patched series is installed and restarts PHP-FPM) and records it.
  3. Watch progress on the Tasks page; when it finishes, Sync now again to confirm the advisory now shows no affected versions.

No terminal, no sudo — the upgrade runs through the OrbixPanel agent with the right privileges.

End-of-life upgrades

If your version’s series is EOL (e.g. PHP 8.1), Upgrade now installs the lowest supported, patched series for you. Afterwards, point each site at the new version under PHP settings and test it before retiring the old one.

Dismiss

If an advisory doesn’t apply to you (software you don’t run, or you’ve handled it another way), click Dismiss to hide it. Turn on Show dismissed to bring it back.

Keep ahead of it

  • Leave advisory sync on (default) so you’re notified automatically.
  • Prefer supported PHP versions — see Apps & runtimes → PHP — so patches are always available.
  • Advisories complement, but don’t replace, the rest of your security setup (firewall, Fail2ban, updates).

You first hear about these as an email from Orbix Cloud and on your cloud dashboard — this page is where you act on them.