PHP 5.2.14 is available too

July 25th, 2010

On july, 22nd, the PHP Group released PHP 5.2.14 :

The PHP development team would like to announce the immediate availability of PHP 5.2.14. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related.

This release marks the end of the active support for PHP 5.2. Following this release the PHP 5.2 series will receive no further active bug maintenance. Security fixes for PHP 5.2 might be published on a case by cases basis. All users of PHP 5.2 are encouraged to upgrade to PHP 5.3.

The packages for Debian “Lenny” are now available on Dotdeb.

Of course, you’re advised to read the full announcement and the Changelog before upgrading.

Thanks (again) to Stefan Esser and the Month of PHP security for improving PHP.

Tags: , ,

PHP 5.3.3 packages are available

July 25th, 2010

On july, 22nd, the PHP Group released PHP 5.3.3 :

The PHP development team would like to announce the immediate availability of PHP 5.3.3. This release focuses on improving the stability and security of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users are encouraged to upgrade to this release.

The packages for Debian “Lenny” are now available on Dotdeb on the usual repository.

Of course, you should read the full announcement, the PHP 5.3 migration guide and consult the Changelog.

Caution : (to PHP-FPM users) with the inclusion of PHP-FPM in the PHP 5.3 core, the syntax of the configuration file (/etc/php5/fpm/php5-fpm.conf) has changed. It switched from a XML syntax to an INI one. Please prepare your new configuration file before upgrading, by reading carefully the PHP documentation and this page.

And thanks to Stefan Esser and the Month of PHP security for improving PHP.

Tags: , ,

Dotdeb packages are now signed!

July 11th, 2010

After many requests from several users and after many months of promise, the Dotdeb repositories are GPG-signed. Yes, you can now get rid of the annoying “WARNING: The following packages cannot be authenticated!” message!

Waiting for a dotdeb-keyring package, you just have to get the appropriate file by hand and add it to your trusted keys’ keyring :


gpg --keyserver keys.gnupg.net --recv-key 89DF5277
gpg -a --export 89DF5277 | sudo apt-key add -

I hope you’ll enjoy it.

Tags: ,

MySQL 5.1.48 packages for Debian are here

June 22nd, 2010

MySQL 5.1.48 packages for Debian 5.0 « Lenny » are now available on Dotdeb in amd64/i386 flavours.

This is a bug fix release, focused on replication and partitioning, and the InnoDB plugin has been updated to the 1.0.9 stable version.

As usual, please read the Changelog carefully before upgrading.

Tags: , ,

MySQL 5.1.47, a security-focused release, is available

May 25th, 2010

MySQL 5.1.47 is now available on Dotdeb for your Lenny servers, in amd64 and i386 flavours.

This is a security-oriented release that fixes some serious flaws… Please read full changelog for more information.

Please also note that the InnoDB plugin has been upgraded to version 1.0.8 and is now considered of General Availability quality. Feel free to use it for a performance boost.

Tags: , , , ,

MySQL 5.1.46 is now available

May 14th, 2010

MySQL 5.1.46 is now available on Dotdeb for your Lenny servers, in amd64 and i386 flavours. It fixes a lot of annoying bugs and upgrades the InnoDB plugin to version 1.0.7 for more performances.

Be careful : the MySQL server is now split in two separate packages :

  • mysql-server-core-5.1 that contains only the mysqld binary and some system files,
  • mysql-server-5.1 that depends on mysql-server-core-5.1 and that contains the init scripts and utilities to run the MySQL server in a Debian environment.

The migration to this new packaging schema is transparent and will not break any dependencies.

As usual, please read the changes in MySQL 5.1.46 and what’s new in the InnoDB plugin 1.0.7 before upgrading.

Tags: , , ,

MySQL on Amazon benchmarks : RDS vs EC2

May 4th, 2010

On May 3rd, I gave a talk for the french Amazon Web Services user group about hosting MySQL on Amazon. Two solutions exist :

  • using RDS, a “Database as a Service”
  • running your own MySQL server on a EC2 instance, with an EBS volume attached, a snapshot-enabled filesystem…

The comparison is made on features, cost and performances. I used the same MySQL version as RDS (5.1.42) and the same config. Performances are measured by tpcc-mysql from Percona and they are charted using Google Fusion Tables.

You’ll se that, altough MySQL + EC2 requires some additionnal DBA or sysadmin skills, it allows a lot of more tuning and a real performance boost (+270%).

So, if you’re planning to host MySQL databases on Amazon, feel free to take a look at these slides :

Note for french-speaking people : la présentation est disponible en français.

Tags: , , , ,

May is the month of PHP security

May 4th, 2010

According to Stefan Esser, author of the Suhosin patch, May 2010 will be the “Month of PHP Security” :

This initiative continues the effort of Hardened-PHP’s Month of PHP Bugs in 2007 to improve the security of PHP and the PHP ecosystem by disclosing vulnerabilities in PHP and PHP applications on the one hand and on the other hand by publishing articles and tools that help PHP application developers to develop more secure PHP applications.

You’ll find more information on the MoPS website and you can follow its twitter account to discover each vulnerability as soon as it’s reported.

Tags: ,

PHP 5.3.2 and PHP 5.2.13 get an update

April 21st, 2010

New packages of PHP 5.3.1 and PHP 5.2.13 has been uploaded to fix some annoying bugs :

In addition, PHP 5.3.2 now restarts softly, without any problem (thanks to Daniel Hahler).

Tags: , ,

MySQL 5.1.45 is available

April 19th, 2010

Sorry, but I forgot to write a note about it. Here’s a quick one…

MySQL 5.1.45 is now available on Dotdeb for Debian 5.0 “Lenny” in amd64/i386 flavours.

This is a bug fix release, but please read the Changelog carefully before upgrading.

Tags: , ,