Posted by & filed under PHP.

On February 16th 2017, the PHP group published PHP 7.0.15.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.16 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

Posted by & filed under Redis.

Redis 3.2.7 has been released on January 31st 2017 to fix important security and correctness issues.

It is especially important to upgrade for Redis Cluster users and for users running Redis in their laptop since a cross-scripting attack is fixed in this release…

Then Redis 3.2.8 has been released on February 12th 2017 to fix potential deadlocks with Redis 3.2.7 and a crash after a socket error.

In both cases, the upgrade urgency is high.

The Redis 3.2.8 packages are now available :

  • for Debian 8 “Jessie” and Debian 7 “Wheezy”
  • on both amd64 and i386 architectures.

Posted by & filed under Nginx.

Nginx 1.10.3 has been released on January 31st 2017, to fix a bunch of bugs.

As a consequence, packages of Nginx 1.10.3 are now available :

  • for Debian 8 “Jessie” (with or without full HTTP2 support – see the instructions) and for Debian 7 “Wheezy”
  • On both amd64 and i386 architectures.

Please note that :

  • I had to remove the Pinba module from the nginx-full and nginx-extras flavors to prevent an unexpected/odd behavior with the realip directives,
  • I will include the dual SPDY/HTTP2 patch from Cloudflare in a future update

For more details about which modules are included in the different Nginx flavors (light, full and extras), just take a look at the configuration options of their respective sections in the Jessie and Wheezy Makefiles.

Posted by & filed under PHP.

Dotdeb is a one-man project that is providing up-to-date PHP packages for more than 14 years now, and I’m very proud and grateful for the community that gathered around it.

From the start, my goal has been to sustain the effort of backporting packages with reliability and compatibility with stock Debian distributions in mind. People got that and have been trusting in Dotdeb and deploying it on thousands of development and production stacks. Thank you very much for that! I mean it.

But it’s 2017 now and I’m afraid to say that – for personal and professional reasons – my focus has shifted a bit off the PHP ecosystem. Since PHP 7.0 has been released, I’m struggling with publishing PHP packages with added value. I mostly did just backports from Debian Sid, without any major changes or contributions. It has been a very frustrating situation for everyone: for me, for Dotdeb users; and for Debian maintainers who now provide either official Debian backports or Debian Personal Archives (DPA).

Because it makes no sense to duplicate the effort any longer, and as long as such viable alternatives exist, Dotdeb won’t provide any package of PHP 7.1 and later.

If you want to install PHP 7.1+ on your machine or just seamlessly upgrade it, you should definitely take a look at deb.sury.org. That’s where Ondřej Surý publishes PHP packages for

  • Debian and Ubuntu,
  • on i386, amd64 and even armhf and arm64 architectures!

He is the official Debian maintainer of the core PHP packages (+ many other PHP modules) and he does a great job providing everything you need to run recent versions of PHP. Depending on the Debian backports team’s decision, these packages could even be available on jessie-backports.

Thanks again for trusting and using Dotdeb all these years for your PHP packages.

Please note that:

  • to keep existing installations/cookbooks/playbooks running and secure, I’ll keep publishing updates of PHP 5.6 for Wheezy and PHP 7.0 for Jessie as long as these versions and distributions are not EOL,
  • other Dotdeb packages are unaffected by this decision and I’ll keep providing them for the current stable & oldstable distributions.

Posted by & filed under PHP.

On January 19th 2017, the PHP group published PHP 7.0.15.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.15 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

I’ll detail the plan for PHP 7.1 in a future post.

Posted by & filed under PHP.

On January 19th 2017, the PHP group released PHP 5.6.30.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

According to our release calendar, this PHP 5.6 version is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of two years. PHP 5.6 users that need further bugfixes are encouraged to upgrade to PHP 7.

PHP 5.6.30 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Posted by & filed under PHP.

On December 8th 2016, the PHP group published PHP 7.0.14.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.14 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

I’ll detail the plan for PHP 7.1 in a future post.

Posted by & filed under PHP.

On November 10th 2016, the PHP group released PHP 5.6.28.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.28 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.