Dotdeb

Dotdeb is shutting down on Dec 31st, 2026

Sat, 31 Oct 2026 12:00:00 +0000

No new packages have been published here for years. I still kept the repositories online, because pulling them would have broken every old server that still has Dotdeb in its sources.list.

The PHP2Shell vulnerabilities changed my mind: Every PHP package served from Dotdeb is affected, none of them will ever be fixed, and installing them today means putting a remotely exploitable server on the Internet. At this point, they’re basically malware, and it would not be responsible to keep serving them.

So Long, and Thanks for All the Fish

Tue, 30 Jun 2020 20:30:00 +0000

Dotdeb has provided packages for 17+ years, as useful additions to Debian releases, from Woody to Jessie. It all started when I was working for a Web-hosting company in France and when official backports did not exist or were not super active. I rapidly made it a personal project and I have taken great pride in publishing useful packages that have been deployed on thousands of machines over the years.

PHP 5.6.40 for Wheezy

Sat, 12 Jan 2019 21:36:14 +0000

On January 10th 2019, the PHP group released PHP 5.6.40.

The PHP development team announces the immediate availability of PHP 5.6.40. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

Please note that according to the PHP version support timelines, PHP 5.6.40 is the last scheduled release of PHP 5.6 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.6 branch. If your PHP installation is based on PHP 5.6, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3.

PHP 7.0.33 for Jessie

Sat, 08 Dec 2018 06:48:34 +0000

On December 6th 2018, the PHP group published PHP 7.0.33.

The PHP development team announces the immediate availability of PHP 7.0.33. Five security-related issues were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Please note that according to the PHP version support timelines, PHP 7.0.33 is the last scheduled release of PHP 7.0 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 7.0 branch. If your PHP installation is based on PHP 7.0, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3.

PHP 5.6.39 for Wheezy

Sat, 08 Dec 2018 01:51:21 +0000

On December 6th 2018, the PHP group released PHP 5.6.39.

The PHP development team announces the immediate availability of PHP 5.6.39. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

Please note that according to the PHP version support timelines, PHP 5.6.39 is the last scheduled release of PHP 5.6 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.6 branch. If your PHP installation is based on PHP 5.6, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3.

Nginx 1.14.2 for Jessie

Tue, 04 Dec 2018 21:40:42 +0000

Nginx 1.14.2 has then been released on December 4th, 2018 to squash a few bugs.

As a consequence, packages of Nginx 1.14.2 are now available for Debian 8 “Jessie” (with or without full HTTP2 support - see the instructions), on both amd64 and i386 architectures.

For more details about which modules are included in the different Nginx flavors (light, full and extras), just take a look at the configuration options in the Makefile.

Nginx 1.14.1 for Jessie

Mon, 12 Nov 2018 17:55:16 +0000

Nginx 1.14 has been released on April 17th 2018, incorporating new features and bug fixes from the 1.13.x mainline branch - including the mirror module, HTTP/2 push, the gRPC proxy module, and more..

Nginx 1.14.1 has then been released on November 6th, 2018, with fixes for vulnerabilities in HTTP/2 (CVE-2018-16843, CVE-2018-16844) and the MP4 module (CVE-2018-16845)..

As a consequence, packages of Nginx 1.14.1 are now available for Debian 8 “Jessie” (with or without full HTTP2 support - see the instructions), on both amd64 and i386 architectures. Associated modules have been updated too. Please note that PageSpeed is now only supported on amd64, not i386.

PHP 7.0.32 for Jessie

Wed, 19 Sep 2018 09:53:07 +0000

On September 13th 2018, the PHP group published PHP 7.0.32.

This is a security release. One security bug has been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.32 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

Important reminder: Jessie entered its “Long Term Support” phase in June 2018 and PHP 7.0 will reach its “End Of Life” in December of this year. Please consider upgrading to more recent versions of both Debian and PHP.

PHP 5.6.38 for Wheezy

Wed, 19 Sep 2018 09:50:36 +0000

On September 13th 2018, the PHP group released PHP 5.6.38.

This is a security release. One security bug has been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.38 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Important reminder: Wheezy is “End Of Life” since May 2018 and PHP 5.6 will at the end of this year. These packages are provided for legacy servers. Please consider upgrading to more recent versions of both Debian and PHP.

PHP 7.0.31 for Jessie

Sun, 22 Jul 2018 21:00:30 +0000

On July 19th 2018, the PHP group published PHP 7.0.31.

This is a security release. Several security bugs have been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.31 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.37 for Wheezy

Sun, 22 Jul 2018 20:52:47 +0000

On July 20th 2018, the PHP group released PHP 5.6.37.

This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.37 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.6.36 for Wheezy

Sat, 28 Apr 2018 00:57:39 +0000

On April 26th 2018, the PHP group released PHP 5.6.36.

This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.36 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.30 for Jessie

Thu, 26 Apr 2018 18:50:45 +0000

On April 26th 2018, the PHP group published PHP 7.0.30.

This is a security release. Several security bugs have been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.30 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.35 for Wheezy

Sun, 01 Apr 2018 09:57:15 +0000

On March 29th 2018, the PHP group released PHP 5.6.35.

This is a security release. One security bug was fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.35 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.29 for Jessie

Sat, 31 Mar 2018 13:57:17 +0000

On March 29th 2018, the PHP group published PHP 7.0.29.

This is a security release. One security bug was fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.29 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.28 for Jessie

Tue, 13 Mar 2018 09:26:39 +0000

On March 1st 2018, the PHP group published PHP 7.0.28.

This is a security release. One security bug was fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.28 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.34 for Wheezy

Mon, 12 Mar 2018 20:06:29 +0000

On March 1st 2018, the PHP group released PHP 5.6.34.

This is a security release. One security bug was fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.34 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.6.33 for Wheezy

Fri, 05 Jan 2018 22:50:56 +0000

On January 4th 2018, the PHP group released PHP 5.6.33.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.33 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.27 for Jessie

Thu, 04 Jan 2018 22:18:06 +0000

On January 4th 2018, the PHP group published PHP 7.0.27.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

This release marks the end of the two years active support period for the 7.0 branch. The further releases of the 7.0 branch will be issued on demand and contain only critical security relevant bug fixes. The security support is provided till December 3rd, 2018. It is a good time to plan the migration to PHP 7.1 or 7.2.

PHP 7.0.26 for Jessie

Sat, 25 Nov 2017 19:31:47 +0000

On November 23rd 2017, the PHP group published PHP 7.0.26.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.26 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.32 for Wheezy

Fri, 03 Nov 2017 01:07:12 +0000

On October 26th 2017, the PHP group released PHP 5.6.32.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.32 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.25 for Jessie

Thu, 02 Nov 2017 17:36:33 +0000

On October 26th 2017, the PHP group published PHP 7.0.25.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.25 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

Nginx 1.12.2 for Jessie

Fri, 20 Oct 2017 02:30:19 +0000

Nginx 1.12.2 has then been released on October 17th, 2017 to squash a few bugs.

As a consequence, packages of Nginx 1.12.2 are now available for Debian 8 “Jessie” (with or without full HTTP2 support - see the instructions), on both amd64 and i386 architectures.

For more details about which modules are included in the different Nginx flavors (light, full and extras), just take a look at the configuration options in the Makefile.

PHP 7.0.24 for Jessie

Mon, 09 Oct 2017 01:18:12 +0000

On September 28th 2017, the PHP group published PHP 7.0.24.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.24 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

Redis 3.2.11

Sat, 23 Sep 2017 16:39:44 +0000

Redis 3.2.11 has been released on September 21st 2017 to fix a bug with AOF flush on SHUTDOWN. The upgrade urgency is high.

The Redis 3.2.11 packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

PHP 7.0.23 for Jessie

Thu, 07 Sep 2017 03:30:25 +0000

On August 31st 2017, the PHP group published PHP 7.0.23.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.23 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.22 for Jessie

Thu, 03 Aug 2017 21:32:56 +0000

On August 3rd 2017, the PHP group published PHP 7.0.22.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.22 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

Redis 3.2.10

Fri, 28 Jul 2017 19:35:31 +0000

Redis 3.2.10 has been released on July 28th 2017 to fix a number of issues that are not critical in the general case, but quite important in certain use cases. As a consequence, the upgrade urgency is moderate.

The Redis 3.2.10 packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

Nginx 1.12.1 for Jessie

Thu, 20 Jul 2017 15:46:21 +0000

Nginx 1.12 has been released on April 12th 2017, bringing a number of new features and capabilities to the 1.11 mainline branch: dynamic modules, IP Transparency, improved TCP/UDP load balancing, better caching performance, and more. You will find more details on this blog post.

Nginx 1.12.1 has then been released on July 12th, 2017 to fix an integer overflow in the range filter (CVE-2017-7529).

As a consequence, packages of Nginx 1.12.1 are now available for Debian 8 “Jessie” (with or without full HTTP2 support - see the instructions), on both amd64 and i386 architectures.

PHP 5.6.31 for Wheezy

Fri, 14 Jul 2017 18:33:48 +0000

On July 6th 2017, the PHP group released PHP 5.6.31.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.31 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Redis 3.2.9

Mon, 22 May 2017 19:19:44 +0000

Redis 3.2.9 has been released on May 17th 2017 to fix fixes bugs that are unlikely to cause serious problems. As a consequence, the upgrade urgency is low.

The Redis 3.2.9 packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

PHP 7.0.19 for Jessie

Fri, 12 May 2017 19:34:17 +0000

On May 11th 2017, the PHP group published PHP 7.0.19.

The PHP development team announces the immediate availability of PHP 7.0.19. Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.19 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.18 for Jessie

Fri, 14 Apr 2017 17:59:27 +0000

On Apr 13th 2017, the PHP group published PHP 7.0.18.

The PHP development team announces the immediate availability of PHP 7.0.18. Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.18 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.17 for Jessie

Thu, 16 Mar 2017 22:05:52 +0000

On March 16th 2017, the PHP group published PHP 7.0.17.

The PHP development team announces the immediate availability of PHP 7.0.17. Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.17 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.16 for Jessie

Fri, 17 Feb 2017 01:06:40 +0000

On February 16th 2017, the PHP group published PHP 7.0.16.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.16 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

Redis 3.2.8

Wed, 15 Feb 2017 20:17:55 +0000

Redis 3.2.7 has been released on January 31st 2017 to fix important security and correctness issues.

It is especially important to upgrade for Redis Cluster users and for users running Redis in their laptop since a cross-scripting attack is fixed in this release…

Then Redis 3.2.8 has been released on February 12th 2017 to fix potential deadlocks with Redis 3.2.7 and a crash after a socket error.

In both cases, the upgrade urgency is high.

Nginx 1.10.3 for Jessie and Wheezy

Wed, 01 Feb 2017 20:00:51 +0000

Nginx 1.10.3 has been released on January 31st 2017, to fix a bunch of bugs.

As a consequence, packages of Nginx 1.10.3 are now available :

for Debian 8 “Jessie” (with or without full HTTP2 support - see the instructions) and for Debian 7 “Wheezy”
On both amd64 and i386 architectures.

Please note that :

I had to remove the Pinba module from the nginx-full and nginx-extras flavors to prevent an unexpected/odd behavior with the realip directives,
I will include the dual SPDY/HTTP2 patch from Cloudflare in a future update

For more details about which modules are included in the different Nginx flavors (light, full and extras), just take a look at the configuration options of their respective sections in the Jessie and Wheezy Makefiles.

PHP 7.1 & Dotdeb

Thu, 26 Jan 2017 23:38:13 +0000

Dotdeb is a one-man project that is providing up-to-date PHP packages for more than 14 years now, and I’m very proud and grateful for the community that gathered around it.

From the start, my goal has been to sustain the effort of backporting packages with reliability and compatibility with stock Debian distributions in mind. People got that and have been trusting in Dotdeb and deploying it on thousands of development and production stacks. Thank you very much for that! I mean it.

PHP 7.0.15 for Jessie

Sat, 21 Jan 2017 21:16:58 +0000

On January 19th 2017, the PHP group published PHP 7.0.15.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.15 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

I’ll detail the plan for PHP 7.1 in a future post.

PHP 5.6.30 for Wheezy

Sat, 21 Jan 2017 21:15:05 +0000

On January 19th 2017, the PHP group released PHP 5.6.30.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

According to our release calendar, this PHP 5.6 version is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of two years. PHP 5.6 users that need further bugfixes are encouraged to upgrade to PHP 7.

Redis 3.2.6

Mon, 12 Dec 2016 20:21:14 +0000

Redis 3.2.6 has been released on October 26th 2016 to fix some minor issues with GEORADIUS, BITFIELD and Redis Cluster.

The upgrade urgency is moderate.

The packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

I’ll detail the plan for Redis 4.0 is a future post.

PHP 7.0.14 for Jessie

Mon, 12 Dec 2016 20:18:29 +0000

On December 8th 2016, the PHP group published PHP 7.0.14.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.14 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.29 for Wheezy

Mon, 12 Dec 2016 20:16:20 +0000

On December 8th 2016, the PHP group released PHP 5.6.29.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.29 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.6.28 for Wheezy

Sat, 12 Nov 2016 21:42:06 +0000

On November 10th 2016, the PHP group released PHP 5.6.28.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.28 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.13 for Jessie

Thu, 10 Nov 2016 19:34:16 +0000

On November 10th 2016, the PHP group published PHP 7.0.13.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.13 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

Update : Nginx 1.10.2

Thu, 27 Oct 2016 20:14:03 +0000

Packages of Nginx 1.10.2 for Jessie and Wheezy - amd64 and i386 - have been updated to fix CVE 2016-1247.

Secure log file handling (owner & permissions) against privilege escalation attacks. /var/log/nginx is now owned by root:adm. Thanks Dawid Golunski for the report. Changing /var/log/nginx permissions effectively reopens #701112, since log files can be world-readable. This is a trade-off until a better log opening solution is implemented upstream ( trac:376).

This update can also bring full HTTP2 support to Jessie with a new additional repository. As a reminder, Chrome as a browser was not supported on stock Jessie, because it requires a more recent OpenSSL 1.0.2 for its ALPN protocol. Now that jessie-backports includes such an OpenSSL version, Dotdeb provides Nginx packages with full HTTP2 support for Chrome. Here is how to install them :

Redis 3.2.5

Thu, 27 Oct 2016 17:28:02 +0000

Redis 3.2.5 has been released on October 26th 2016 to fix a compilation issue.

The upgrade urgency is low.

The packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

Nginx 1.10.2 For Jessie and Wheezy

Wed, 19 Oct 2016 00:21:19 +0000

Nginx 1.10.2 has been released on October 18th 2016, to fix issues with HTTP/2 and bugs with the sub_filter, aio threads and sendfile directives.

As a consequence, packages of Nginx 1.10.2 are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
On both amd64 and i386 architectures.

PHP 7.0.12 for Jessie

Mon, 17 Oct 2016 18:13:10 +0000

On October 13th 2016, the PHP group published PHP 7.0.12.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.12 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.27 for Wheezy

Mon, 17 Oct 2016 18:11:28 +0000

On October 14th 2016, the PHP group released PHP 5.6.27.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.27 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Redis 3.2.4

Wed, 28 Sep 2016 16:47:07 +0000

Redis 3.2.4 has been released on September 26th 2016, bringing an important security fix and a few other changes.

The upgrade urgency is critical.

The packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

PHP 7.0.11 for Jessie

Mon, 19 Sep 2016 07:45:47 +0000

On September 15th 2016, the PHP group published PHP 7.0.11.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.11 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.26 for Wheezy

Mon, 19 Sep 2016 07:44:11 +0000

On September 16th 2016, the PHP group released PHP 5.6.26.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.26 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.10 for Jessie

Fri, 19 Aug 2016 07:18:06 +0000

On August 18th 2016, the PHP group published PHP 7.0.10.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.10 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.25 for Wheezy

Fri, 19 Aug 2016 06:03:58 +0000

On August 18th 2016, the PHP group released PHP 5.6.25.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.25 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Redis 3.2.3

Fri, 05 Aug 2016 00:55:19 +0000

Redis 3.2.3 has been released on August 2nd 2016, bringing fixes for replication delay and for a redis-cli security issue.

The upgrade urgency moderate.

The packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

Redis 3.2.2

Thu, 28 Jul 2016 19:01:22 +0000

Redis 3.2.2 has been released on July 28th 2016, bringing fixes for a Redis server and a Sentinel crash, and for GEORADIUS errors in reported entries + a few more improvements.

The upgrade urgency moderate.

The packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

PHP 7.0.9 for Jessie

Fri, 22 Jul 2016 07:28:47 +0000

On July 21st 2016, the PHP group published PHP 7.0.9.

This is a security release. Several security bugs were fixed in this release, including the HTTP_PROXY issue. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.9 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.24 for Wheezy

Fri, 22 Jul 2016 07:26:50 +0000

On July 21st 2016, the PHP group released PHP 5.6.24.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.24 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.5.38 for Wheezy (End of Life)

Fri, 22 Jul 2016 07:22:14 +0000

On July 21st 2016, the PHP group released PHP 5.5.38.

This is a security release that fixes some security related bugs. All PHP 5.5 users are encouraged to upgrade to this version. (…) Note that according to our release schedule, PHP 5.5.38 is the last release of the PHP 5.5 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.5 branch. If your PHP installation is based on PHP 5.5, it may be a good time to start making the plans for the upgrade to PHP 5.6 or PHP 7.0.

PHP 7.0.8 for Jessie

Fri, 24 Jun 2016 18:14:17 +0000

On June 23rd 2016, the PHP group published PHP 7.0.8.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Please also note that bcmatch, dba, mbstring, soap, xml and zip now have their separate dedicated packages.

Packages of PHP 7.0.8 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.23 for Wheezy

Fri, 24 Jun 2016 17:53:51 +0000

On June 23rd 2016, the PHP group released PHP 5.6.23.

Several bugs were fixed in this release, including security-related ones. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.23 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.5.37 for Wheezy

Fri, 24 Jun 2016 17:44:48 +0000

On June 23rd 2016, the PHP group released PHP 5.5.37.

This is a security release, several security bugs were fixed. All PHP 5.5 users are encouraged to upgrade to this version.

And because it’s probably the last PHP 5.5 release before it reaches its security EOL, you’d better upgrade to PHP 5.6 and above as soon as possible.

PHP 5.5.37 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

Redis 3.2.1

Mon, 20 Jun 2016 18:02:30 +0000

Redis 3.2.1 has been released on June 17th 2016, bringing important bug fixes for Redis Sentinel and a few more improvements.

The upgrade urgency high.

The packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

Nginx 1.10.1 for Jessie and Wheezy

Thu, 02 Jun 2016 01:30:31 +0000

Nginx 1.10 - the new stable major version - has been released on May 24th 2016, followed by Nginx 1.10.1 on May 31st to fix the CVE-2016-4450 vulnerability.

The 1.10 branch brings a lot of new features and improvements, including :

HTTP/2 support: The SPDY module was replaced by the HTTP/2 module. Please make sure to update your listen directives.
The new stream module that lets you proxy and load-balance UDP and TCP traffic.
Support for dynamic modules.
SO_REUSEPORT support, TCP support for DNS resolution…

PHP 7.0.7 for Jessie

Wed, 01 Jun 2016 14:28:57 +0000

On May 26th 2016, the PHP group published PHP 7.0.7.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.7 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and debug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.22 for Wheezy

Wed, 01 Jun 2016 14:25:33 +0000

On May 26th 2016, the PHP group released PHP 5.6.22.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.22 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.5.36 for Wheezy

Wed, 01 Jun 2016 14:23:13 +0000

On May 26th 2016, the PHP group released PHP 5.5.36.

This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.36 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.11
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

Redis 3.2.0

Sat, 07 May 2016 21:27:57 +0000

Redis 3.2.0, the first release of the new 3.2 stable major branch, has been released on May 6th 2016, bringing some new features : the GEO API, the new BITFIELD command, many improvements to Redis Cluster and Lua scripts replication… You can read the full story here.

The packages are now available :

for Debian 8 “Jessie” and Debian 7 “Wheezy”
on both amd64 and i386 architectures.

PHP 5.6.21 for Wheezy

Fri, 29 Apr 2016 17:16:09 +0000

On April 29th 2016, the PHP group released PHP 5.6.21.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.21 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.6 for Jessie

Fri, 29 Apr 2016 17:06:58 +0000

On April 29th 2016, the PHP group published PHP 7.0.6.

This is a security release. Several security bugs were fixed in this release, including CVE-2016-3078 and CVE-2016-3074. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.6 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
The thread-safe version of all these packages will be published soon.

As usual :

PHP 5.6.20 for Wheezy

Fri, 01 Apr 2016 07:40:14 +0000

On March 31st 2016, the PHP group released PHP 5.6.20.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.20 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.5 for Jessie

Fri, 01 Apr 2016 04:57:28 +0000

On March 31st 2016, the PHP group published PHP 7.0.5.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.5 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
The thread-safe version of all these packages will be published soon.

As usual :

PHP 5.5.33 for Wheezy

Tue, 08 Mar 2016 07:10:33 +0000

On March 3rd 2016, the PHP group released PHP 5.5.33.

This is a security release in which two security bugs were fixed. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.33 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.11
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.19 for Wheezy

Sat, 05 Mar 2016 20:07:17 +0000

On March 3rd 2016, the PHP group released PHP 5.6.19.

This is a security release in which several security bugs were fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.19 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.4 for Jessie

Fri, 04 Mar 2016 05:09:22 +0000

On March 3rd 2016, the PHP group published PHP 7.0.4.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.4 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
the memcached.serializer is now igbinary by default. You should change it back to php if you’re upgrading from a previous version.
The thread-safe version of all these packages will be published soon.

As usual :

MySQL 5.6.29 for Wheezy

Mon, 22 Feb 2016 05:26:31 +0000

MySQL 5.6.29 has been released by Oracle on February 5th 2016. Please read the full Changelog fore more details.

The corresponding packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

PHP 5.6.18 for Wheezy

Sun, 07 Feb 2016 20:22:07 +0000

On February 4th 2016, the PHP group released PHP 5.6.18.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.18 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Redis 3.0.7

Sat, 06 Feb 2016 01:16:38 +0000

Redis 3.0.7 has been released on January 28th 2016, bringing important bug fixes for Redis Cluster.

The upgrade urgency is moderate.

The packages are now available :

for Debian 8 “Jessie”, Debian 7 “Wheezy” and Debian 6 “Squeeze”
on both amd64 and i386 architectures.

PHP 7.0.3 for Jessie

Fri, 05 Feb 2016 23:10:11 +0000

On February 4th 2016, the PHP group published PHP 7.0.3.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.3 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
the memcached.serializer is now igbinary by default. You should change it back to php if you’re upgrading from a previous version.
The thread-safe version of all these packages will be published soon.

As usual :

Nginx 1.8.1

Tue, 26 Jan 2016 22:55:34 +0000

Nginx 1.8.1 has been released on January 26th 2016, to fix three security issues in its resolver.

As a consequence, packages of Nginx 1.8.1 are now available :

for Debian 8 “Jessie”, Debian 7 “Wheezy” and Debian 6 “Squeeze”
On both amd64 and i386 architectures.

Please also note that ngx_pagespeed has been updated to :

version 1.10.33.2 on Jessie
only version 1.9.32.11 on Wheezy and Squeeze, because the 1.10 branch now requires GCC 4.8+. Usage of ngx_pagespeed on Wheezy and Squeeze has been kept for compatibility purpose but is highly discouraged. Upgrade to Jessie instead.

For more details about which modules are included in the different Nginx flavors, just have to look at this document.

PHP 7.0.2 for Jessie

Fri, 08 Jan 2016 04:26:32 +0000

On January 7th 2016, the PHP group published PHP 7.0.2.

31 reported bugs has been fixed, including 6 security related issues. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.2 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

You should remove any PHP5 packages before upgrading
Packages of the PECL extensions (Memcache, Memcached, Mongo, Redis, Xdebug…) are still missing.
The thread-safe version of all these packages will be published soon.

Please make sure that you understand the above PHP/Debian/Dotdeb changes and that you don’t need any of the missing features/packages. Your feedbacks are always welcome. Just make sure they are useful.

PHP 5.6.17 for Wheezy

Fri, 08 Jan 2016 04:20:51 +0000

On January 7th 2016, the PHP group released PHP 5.6.17.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.17 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.1 for Jessie

Mon, 28 Dec 2015 01:35:58 +0000

On December 17th 2015, the PHP group published PHP 7.0.1.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.1 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

You should remove any PHP5 packages before upgrading
The bz2 and xmlrpc modules are now packaged separately, respectively name php7.0-bz2 and php7.0-xmlrpc.
Packages of the PECL extensions (Memcache, Memcached, Mongo, Redis, Xdebug…) are still missing and require some work from me.
The thread-safe version of all these packages will be published soon.

Redis 3.0.6

Tue, 22 Dec 2015 23:45:11 +0000

Redis 3.0.6 has been released on December 18th 2015, bringing some fixes and features backports from 3.2.

The upgrade urgency is moderate :

We fixed a crash that happens very rarely, so updating does not hurt, but most users are unlikely to experience this condition because it requires some odd timing. However if you are a Redis Cluster user, upgrading is strongly adviced since this release includes very important improvements to Redis Cluster.

PHP 7.0.0 is available for Jessie

Fri, 04 Dec 2015 00:35:00 +0000

On December 3rd 2015, the PHP group published PHP 7.0.0.

PHP 7.0.0 comes with a new version of the Zend Engine, numerous improvements and new features such as :

Improved performance: PHP 7 is up to twice as fast as PHP 5.6

Significantly reduced memory usage

Abstract Syntax Tree

Consistent 64-bit support

Improved Exception hierarchy

Many fatal errors converted to Exceptions

Secure random number generator

Removed old and unsupported SAPIs and extensions

The null coalescing operator (??)

Return and Scalar Type Declarations

Anonymous Classes

Zero cost asserts

The list of changes is recorded in the ChangeLog.

The migration guide is available in the PHP Manual. Please consult it for the detailed list of new features and backward incompatible changes.

PHP 7.0-RC8 for Jessie

Mon, 30 Nov 2015 04:44:50 +0000

On November 26th 2015, the PHP group published the eighth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 8 contains fixes for 11 reported bugs. (…) This release candidate prepares the short jump to the RTM. If no major issues appear, the 7.0.0 general availability (GA) release will be brought out on December 3rd. You can also read the full list of planned releases on our wiki.

PHP 5.6.16 for Wheezy

Mon, 30 Nov 2015 04:29:50 +0000

On November 26th 2015, the PHP group released PHP 5.6.16.

Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.16 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0-RC7 for Jessie

Thu, 12 Nov 2015 20:37:05 +0000

On November 12th 2015, the PHP group published the seventh release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 7 contains fixes for 17 reported bugs. (…) This release candidate is unplanned and ships instead of the announced RTM for the reasons of yet additional quality improvement. If no major issues appear within the usual two-week test period, the 7.0.0 general availability (GA) release will be brought out. You can also read the full list of planned releases on our wiki.

Zabbix 2.2.11

Thu, 12 Nov 2015 19:22:41 +0000

Zabbix 2.2.11 has been released on November 12th 2015. This release fixes known issues of Zabbix 2.2.x and introduces new minor features. Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7 “Wheezy and 6 “Squeeze”,
on both amd64 and i386 architectures.

PHP 5.6.15 for Wheezy

Tue, 03 Nov 2015 19:14:54 +0000

On October 29th 2015, the PHP group released PHP 5.6.15.

Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.15 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0-RC6 for Jessie

Thu, 29 Oct 2015 19:17:36 +0000

On October 29th 2015, the PHP group published the sixth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 6 contains fixes for 10 reported bugs and marks the end of the pre-release circle.

Packages of PHP 7.0-RC6 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Disclaimer : THIS IS A DEVELOPMENT PREVIEW (from a PHP upstream and from a Dotdeb/Debian packaging perspectives) - DO NOT USE IT IN PRODUCTION!

PHP 7.0-RC5 for Jessie

Mon, 19 Oct 2015 15:15:00 +0000

On October 15th 2015, the PHP group published the fifth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 5 contains fixes for 11 reported bugs and over 100 commits with various improvements.

Packages of PHP 7.0-RC5 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Disclaimer : THIS IS A DEVELOPMENT PREVIEW (from a PHP upstream and from a Dotdeb/Debian packaging perspectives) - DO NOT USE IT IN PRODUCTION!

Redis 3.0.5

Fri, 16 Oct 2015 16:30:16 +0000

Redis 3.0.5 has been released on October 15th 2015, bringing some replication fixes and new cluster features.

The upgrade urgency moderate :

the most important thing is a fix in the replication code that may make the slave hanging forever if the master remains with an open socket even if it is no longer able to reply.

The packages are now available :

for Debian 8 “Jessie”, Debian 7 “Wheezy” and Debian 6 “Squeeze”
on both amd64 and i386 architectures.

PHP 5.5.30 for Wheezy

Mon, 12 Oct 2015 02:42:05 +0000

On October 1st 2015, the PHP group released PHP 5.5.30.

This is a security release. Two security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.30 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.11
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.14 for Wheezy

Fri, 02 Oct 2015 15:20:35 +0000

On October 1st 2015, the PHP group released PHP 5.6.14.

Two security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.14 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0-RC4 for Jessie

Thu, 01 Oct 2015 20:08:39 +0000

On October 1st 2015, the PHP group published the fourth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 4 contains fixes for 22 reported bugs and over 100 commits with various improvements.

Packages of PHP 7.0-RC4 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Disclaimer : THIS IS A DEVELOPMENT PREVIEW (from a PHP upstream and from a Dotdeb/Debian packaging perspectives) - DO NOT USE IT IN PRODUCTION!

PHP 7.0-RC3 for Jessie

Fri, 18 Sep 2015 06:17:31 +0000

On September 17th 2015, the PHP group published the third release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 3 contains fixes for 19 reported bugs and over 100 commits with various improvements.

This release provides a noticeable new Opcache feature which makes possible to move PHP code pages into the huge memory pages. It can be enabled with opcache.huge_code_pages=1 in php.ini and can bring about 2% performance gain on supported platforms. Please help us to test this feature by enabling it and providing feedback.

Redis 3.0.4

Tue, 08 Sep 2015 15:12:02 +0000

Redis 3.0.4 has been released on September 8th 2015, bringing some important fixes and new replication features.

The upgrade urgency is high for Redis and Sentinel.

However note that in order to fix certain replication bugs, the replication internals were modified in a very heavy way. So while this release is conceptually saner, it may contain regressions. For this reason, before the release, QA activities were performed by me ( antirez) and Redis Labs and no evident bug was found.

PHP 7.0-RC2 is available for Debian 8 "Jessie"

Tue, 08 Sep 2015 02:50:24 +0000

On September 4th 2015, the PHP group published the second release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 2 contains fixes for 28 reported bugs, 7 of which are security related, and altogether over 250 commits with various improvements.

PHP 7.0.0 comes with new version of the Zend Engine with features such as (incomplete list):

Improved performance: PHP 7 is up to twice as fast as PHP 5.6

Consistent 64-bit support

Many fatal errors are now Exceptions

Removal of old and unsupported SAPIs and extensions

The null coalescing operator (??)

Combined comparison Operator (< =>)

Return Type Declarations

Scalar Type Declarations

Anonymous Classes

For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes.

Zabbix 2.2.10

Tue, 08 Sep 2015 02:06:44 +0000

Zabbix 2.2.10 has been released on August 10th 2015. This release fixes known issues of Zabbix 2.2.x and introduces new minor features. Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

PHP 5.4.45, for Wheezy and Squeeze

Tue, 08 Sep 2015 02:00:16 +0000

On September 4th 2015, the PHP group released PHP 5.4.45.

Ten security-related issues were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version.

(…)

Please note that according to the PHP version support timelines, PHP 5.4.45 is the last scheduled release of PHP 5.4 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.4 branch. If your PHP installation is based on PHP 5.4, it may be a good time to start making the plans for the upgrade to PHP 5.5 or PHP 5.6.

PHP 5.5.29 for Wheezy

Mon, 07 Sep 2015 19:00:34 +0000

On September 4th 2015, the PHP group released PHP 5.5.29.

This is a security release. Many security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.29 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.10
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.13 for Wheezy

Fri, 04 Sep 2015 22:48:23 +0000

On September 4th 2015, the PHP group released PHP 5.6.13.

11 security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.13 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Note : php5-memcached still lacks JSON support.

PHP 5.5.28 for Wheezy

Sun, 23 Aug 2015 05:51:04 +0000

On August 6th 2015, the PHP group released PHP 5.5.28.

12 security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.28 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.10
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.12 for Wheezy

Sat, 08 Aug 2015 23:49:28 +0000

On August 6th 2015, the PHP group released PHP 5.6.12.

12 security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.12 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Note : php5-memcached still lacks JSON support.

PHP 5.4.43, for Wheezy and Squeeze

Wed, 22 Jul 2015 23:22:38 +0000

On July 9th 2015, the PHP group released PHP 5.4.43.

Five security-related issues in PHP were fixed in this release, including CVE-2015-3152. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.10
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.3
xhprof 0.9.4
zendopcache 7.0.5

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Redis 3.0.3

Fri, 17 Jul 2015 18:57:50 +0000

Redis 3.0.3 has been released on July 17th 2015, bringing a few fixes and a variadic EXISTS command.

The upgrade urgency low for Redis and Sentinel.

The packages are now available :

for Debian 8 “Jessie”, Debian 7 “Wheezy” and Debian 6 “Squeeze”
on both amd64 and i386 architectures.

PHP 5.5.27 for Wheezy

Wed, 15 Jul 2015 18:23:22 +0000

On July 10th 2015, the PHP group released PHP 5.5.27.

Several bugs were fixed in this release as well as CVE-2015-3152. All PHP 5.5 users are encouraged to upgrade to this version. (…) this PHP 5.5 version is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of one year. PHP 5.5 users that need further bugfixes are encouraged to upgrade to PHP 5.6.

PHP 5.6.11 for Wheezy

Tue, 14 Jul 2015 05:52:34 +0000

On July 10th 2015, the PHP group released PHP 5.6.11.

Five security-related issues in PHP were fixed in this release, including CVE-2015-3152. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.11 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Note : php5-memcached still lacks JSON support.

MySQL 5.6.25 for Wheezy

Sat, 04 Jul 2015 20:33:23 +0000

MySQL 5.6.25 has been released by Oracle on May 29th 2015. Please read the full Changelog fore more details.

The corresponding packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

PHP 5.4.42, for Wheezy and Squeeze

Wed, 24 Jun 2015 05:40:56 +0000

On June 11th 2015, the PHP group released PHP 5.4.42.

Six security-related issues in PHP were fixed in this release, as well as several security issues in bundled sqlite library (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416). All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.5.26 for Wheezy

Wed, 17 Jun 2015 06:35:38 +0000

On June 11th 2015, the PHP group released PHP 5.5.26.

Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.26 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.9
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please note that the PCRE issue that Apache users encountered is now fixed.

PHP 5.6.10 for Wheezy

Fri, 12 Jun 2015 04:45:04 +0000

On June 11th 2015, the PHP group released PHP 5.6.10.

Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.10 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with packages of Xdebug (yeah!), XHprof (yeah! x2) and other PECL extensions.

Redis 3.0.2

Thu, 04 Jun 2015 17:57:12 +0000

Redis 3.0.2 has been released on June 4th 2015, bringing security fixes, as well as new options and commands.

The upgrade urgency high for Redis because of a security issue, low for Sentinel.

The packages are now available :

for Debian 8 “Jessie”, Debian 7 “Wheezy” and Debian 6 “Squeeze”
on both amd64 and i386 architectures.

PHP 5.4.41, for Wheezy and Squeeze

Fri, 22 May 2015 14:32:33 +0000

On May 14th 2015, the PHP group released PHP 5.4.41.

Seven security-related issues were fixed in this version. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.8
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4
zendopcache 7.0.5

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.25 for Wheezy

Fri, 22 May 2015 04:24:01 +0000

On May 14th 2015, the PHP group released PHP 5.5.25.

Several bugs have been fixed. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.25 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.8
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.9 for Wheezy

Wed, 20 May 2015 21:03:00 +0000

On May 14th 2015, the PHP group released PHP 5.6.9.

Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.9 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Xcache, Xdebug and Xhprof are currently being worked on and should be available soon

Nginx 1.8.0

Thu, 07 May 2015 07:39:42 +0000

Nginx 1.8.0 has been released on April 21th 2015.

This is the first version of the new 1.8.x stable branch, incorporating many new features from the 1.7.x mainline branch - including hash load balancing method, backend SSL certificate verification, experimental thread pools support, proxy_request_buffering and more.

Packages of Nginx 1.8.0 are now available

for Debian 8 “Jessie”, Debian 7 “Wheezy” and Debian 6 “Squeeze”
on both amd64 and i386 architectures.

with the following changes :

because Passenger 3.x isn’t compatible with Nginx 1.8, nginx-passenger isn’t available for Squeeze anymore
Logging to Syslog is now supported upstream
ngxensite and ngxdissite scripts have been replaced by ngx-conf (take a look at its -e and -d options)
Default config files has been synced with both upstream and Debian versions. Please review them systematically when upgrading
Thread pools support has been enabled in every Nginx flavor
All the modules have been updated to their latest version

For more details about which modules are included in the different Nginx flavors, just have to look at this document.

Redis 3.0.1

Wed, 06 May 2015 21:37:02 +0000

Redis 3.0.1 has been released on May 5th 2015, bringing a few bug fixes.

The upgrade urgency is low for Redis and Cluster, moderate for Sentinel.

The packages are now available :

for Debian 8 “Jessie”, Debian 7 “Wheezy” and Debian 6 “Squeeze”
on both amd64 and i386 architectures.

Debian 8.0 Jessie has been released, and what it means for Dotdeb

Sun, 26 Apr 2015 18:06:27 +0000

Good news, guys : Debian 8.0 Jessie has been released on April 25th 2015. Huge kudos to all the Debian developers who made this happen!

Jessie already includes the following components by default :

PHP 5.6.7
MariaDB 1.0.16 and MySQL 5.5.42
Nginx 1.6.2

That means that in the next few days/weeks (thanks in advance for your patience), Dotdeb will progressively provide the following packages for Jessie :

Nginx, latest stable release
Redis, latest release
Zabbix LTS
Last but not least, PHP 7 once it’s declared as stable

That also means that Dotdeb won’t provide these packages for Jessie :

PHP 5.4.40, for Wheezy and Squeeze

Thu, 23 Apr 2015 03:41:52 +0000

On April 16th 2015, the PHP group released PHP 5.4.40.

14 security-related bugs were fixed in this release, including CVE-2014-9709, CVE-2015-2301, CVE-2015-2783, CVE-2015-1352. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.6
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4
zendopcache 7.0.5

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.24 for Wheezy

Thu, 23 Apr 2015 01:15:19 +0000

On April 16th 2015, the PHP group released PHP 5.5.24.

Several bugs have been fixed some of them beeing security related, like CVE-2015-1351 and CVE-2015-1352. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.24 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.6
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.8 for Wheezy

Wed, 22 Apr 2015 07:03:09 +0000

On April 16th 2015, the PHP group released PHP 5.6.8.

Several bugs have been fixed some of them beeing security related, like CVE-2015-1351 and CVE-2015-1352. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.8 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Xcache, Xdebug and Xhprof are currently being worked on and should be available in the next few days

Nginx 1.6.3, for Wheezy and Squeeze

Thu, 09 Apr 2015 02:04:17 +0000

Nginx 1.6.3 has been released on April 7th 2015, with the following changes :

Feature: now the tcp_nodelay directive works with SPDY connections.
Bugfix: in error handling. Thanks to Yichun Zhang and Daniil Bondarev.
Bugfix: alerts header already sent appeared in logs if the post_action directive was used; the bug had appeared in 1.5.4.
Bugfix: alerts sem_post() failed might appear in logs.
Bugfix: in hash table handling. Thanks to Chris West.
Bugfix: in integer overflow handling. Thanks to Régis Leroy.

As a consequence, packages of Nginx 1.6.3 are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” (amd64/i386).

Redis 3.0.0

Tue, 07 Apr 2015 17:22:34 +0000

A new major branch of Redis has been declared as stable, and version 3.0.0 has been published on April 1st 2015.

It brings Redis Cluster, a distributed implementation of Redis with automatic data sharding and fault tolerance, important speed improvements under certain workloads, improved AOF rewriting, and more… Please read the release notes for more details.

The packages are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” on both amd64 and i386 architectures. They have been split in redis-server, redis-sentinel and redis-tools depending on your usage.

Zabbix 2.2.9

Mon, 06 Apr 2015 17:58:34 +0000

Zabbix 2.2.9 has been released on March 12th 2015. This release fixes known issues of Zabbix 2.2.x and introduces new minor features. Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

PHP 5.4.39, for Wheezy and Squeeze

Sun, 22 Mar 2015 20:36:50 +0000

On March 19th 2015, the PHP group released PHP 5.4.39.

Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.5
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4
zendopcache 7.0.4

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.23 for Wheezy

Sun, 22 Mar 2015 18:22:05 +0000

On March 20th 2015, the PHP group released PHP 5.5.23.

Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.23 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.5
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.7 for Wheezy

Sun, 22 Mar 2015 15:55:47 +0000

On March 20th 2015, the PHP group released PHP 5.6.7.

Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.7 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m still working on it, sorry for the delay
End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

PHP 5.4.38, for Wheezy and Squeeze

Sun, 01 Mar 2015 02:38:36 +0000

On February 18th 2015, the PHP group released PHP 5.4.38.

Seven security-related bugs were fixed in this release, including CVE-2015-0273 and mitigation for CVE-2015-0235. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.1
xhprof 0.9.4
zendopcache 7.0.4

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.22 for Wheezy

Thu, 26 Feb 2015 05:36:15 +0000

On February 19th 2015, the PHP group released PHP 5.5.22.

This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.22 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.1
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.6 for Wheezy

Sat, 21 Feb 2015 17:31:52 +0000

On February 19th 2015, the PHP group released PHP 5.6.6.

This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.6 users are encouraged to upgrade to this version. (…) The list of changes is recorded in the ChangeLog.

PHP 5.6.6 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m working on it
End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

MySQL 5.6.23 for Wheezy

Sun, 08 Feb 2015 21:53:44 +0000

MySQL 5.6.23 has been released by Oracle on February 2nd 2015. Please read the full Changelog fore more details.

The corresponding packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

PHP 5.4.37, for Wheezy and Squeeze

Fri, 06 Feb 2015 06:02:19 +0000

On January 22nd 2015, the PHP group released PHP 5.4.37.

Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.1
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.7
xhprof 0.9.4
zendopcache 7.0.4

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.21 for Wheezy

Wed, 04 Feb 2015 06:20:09 +0000

On January 22nd 2015, the PHP group released PHP 5.5.21.

This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.21 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.0
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.7
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.5 for Wheezy

Mon, 02 Feb 2015 01:54:15 +0000

On January 22nd 2015, the PHP group released PHP 5.6.5.

This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.6 users are encouraged to upgrade to this version. (…) The list of changes is recorded in the ChangeLog.

PHP 5.6.5 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

Notes :

Because of performance issues with Zend thread safety (pthreads depends on it), I had to disable it on the wheezy-php56 repo. Users using pthreads now have to use the wheezy-php56-zts repository instead. See the instructions for more details
Regression : php5-memcached still lacks JSON support
Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m working on it
End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

Percona toolkit 2.2.12

Sun, 21 Dec 2014 00:07:10 +0000

Percona toolkit 2.2.12 is now available on Dotdeb for both Debian 7 “Wheezy” and Debian 6 “Squeeze”. This release fixes 6 bugs and introduces a new feature in pt-stalk.

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.12 and the announcement by Hrvoje Matijakovic.

Zabbix 2.2.8

Sun, 21 Dec 2014 00:03:56 +0000

Zabbix 2.2.8 has been released on December 15th 2014. This release fixes known issues of Zabbix 2.2.x. Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Redis 2.8.19

Sat, 20 Dec 2014 23:03:43 +0000

Redis 2.8.19 has been released on December 16th 2014, bringing small bug fixes.

The upgrade urgency is low for both Redis and Sentinel.

The packages are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” on both amd64 and i386 architectures.

PHP 5.4.36, for Wheezy and Squeeze

Sat, 20 Dec 2014 22:44:50 +0000

On December 18th 2014, the PHP group released PHP 5.4.36.

Two security-related bugs were fixed in this release, including the fix for CVE-2014-8142. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.8
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.6
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.20 for Wheezy

Sat, 20 Dec 2014 21:45:42 +0000

On December 18th 2014, the PHP group released PHP 5.5.20.

This release fixes several bugs and one CVE related to unserialization. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.20 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.8
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.6
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.4 for Wheezy

Sat, 20 Dec 2014 17:03:39 +0000

On December 18th 2014, the PHP group released PHP 5.6.4.

Two security-related bugs were fixed in this release, including the fix for CVE-2014-8142. All PHP 5.4 users are encouraged to upgrade to this version.

PHP 5.6.4 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

Please also note these points :

Regression : php5-memcached lacks JSON support
Missing packages : Xcachen Xdebug and Xhprof are missing for now
End of support : Spplus won’t be supported anymore. Pinba’s fates hasn’t been decided yet.

As a consequence :

PHP 5.4.35, for Wheezy and Squeeze

Tue, 18 Nov 2014 23:39:18 +0000

On November 13th 2014, the PHP group released PHP 5.4.35.

4 security-related bugs were fixed in this release, including the fix for CVE-2014-3710. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.8
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.6
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.19 for Wheezy

Tue, 18 Nov 2014 07:06:45 +0000

On November 13th 2014, the PHP group released PHP 5.5.19.

This release fixes several bugs and one CVE in the fileinfo extension. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.19 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. They include a fix for regressions in the FPM SAPI (See 1, 2 and 3) that is present in the upstream version of PHP 5.5.19.

PHP 5.6.3 for Wheezy

Mon, 17 Nov 2014 07:25:03 +0000

On November 13th 2014, the PHP group released PHP 5.6.3.

This release fixes several bugs and one CVE in the fileinfo extension. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.3 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. They include a fix for regressions in the FPM SAPI (See 1, 2 and 3) that is present in the upstream version of PHP 5.6.3.

MySQL 5.6.21 for Wheezy

Tue, 28 Oct 2014 20:26:56 +0000

MySQL 5.6.21 has been released on September 23rd, 2014, fixing 24 security issues and various bugs affecting previous versions.

Please read the full Changelog fore more details.

The corresponding packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

Note : Some people reported having difficulties upgrading from 5.6.19 to 5.6.21. If this is your case, prefer using apt-get dist-upgrade (or equivalent) instead of apt-get upgrade.

PHP 5.4.34, for Wheezy and Squeeze

Thu, 23 Oct 2014 22:30:44 +0000

On October 16th 2014, the PHP group released PHP 5.4.34.

6 security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. Also, a fix for OpenSSL which produced regressions was reverted. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.5.18 for Debian Wheezy

Wed, 22 Oct 2014 19:34:05 +0000

On October 16th 2014, the PHP group released PHP 5.5.18.

Several bugs were fixed in this release. A regression in OpenSSL introduced in PHP 5.5.17 has also been addressed in this release. PHP 5.5.18 also fixes 4 CVEs in different components. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.18 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.6.2 for Wheezy

Wed, 22 Oct 2014 01:01:48 +0000

On October 16th 2014, the PHP group released PHP 5.6.2.

Four security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.2 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

Please also note these points :

Regression : php5-memcached lacks JSON support
Missing packages : Xcachen Xdebug and Xhprof are missing for now
End of support : Spplus won’t be supported anymore. Pinba’s fates hasn’t been decided yet.

As a consequence :

PHP 5.6.1 for Wheezy

Fri, 03 Oct 2014 14:37:12 +0000

On October 2nd 2014, the PHP group released PHP 5.6.1.

Several bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.1 packages are now available on Dotdeb for Debian 7.6 “Wheezy”, on both amd64 and i386 architectures.

Please also note these points :

Regression : php5-memcached lacks JSON support
Missing packages : Xdebug and Xhprof are missing for now
End of support : Spplus won’t be supported anymore. Xcache’s and Pinba’s fates haven’t been decided yet

As a consequence :

PHP 5.6.0 packages for Wheezy

Mon, 22 Sep 2014 04:45:22 +0000

On August 28th, the PHP group released the first stable version of the new major branch, PHP 5.6.0 :

The PHP Development Team announces the immediate availability of PHP 5.6.0. This new version comes with new features, some backward incompatible changes and many improvements.

The main features of PHP 5.6.0 include:

Constant scalar expressions.

Variadic functions and argument unpacking using the … operator.

Exponentiation using the ** operator.

Function and constant importing with the use keyword.

phpdbg as an interactive integrated debugger SAPI.

php://input is now reusable, and $HTTP_RAW_POST_DATA is deprecated.

GMP objects now support operator overloading.

File uploads larger than 2 gigabytes in size are now accepted.

For a full list of new features, you may read the new features chapter of the migration guide.

PHP 5.6.0 also introduces changes that affect compatibility:

Array keys won’t be overwritten when defining an array as a property of a class via an array literal.

json_decode() is more strict in JSON syntax parsing.

Stream wrappers now verify peer certificates and host names by default when using SSL/TLS.

GMP resources are now objects.

Mcrypt functions now require valid keys and IVs.

Nginx 1.6.2, for Wheezy and Squeeze

Sat, 20 Sep 2014 21:21:49 +0000

Nginx 1.6.2 has been released on September 16th 2014, with the following changes :

Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple “server” blocks ( CVE-2014-3616). Thanks to Antoine Delignat-Lavaud.
Bugfix: requests might hang if resolver was used and a DNS server returned a malformed response; the bug had appeared in 1.5.8.
Bugfix: requests might hang if resolver was used and a timeout occurred during a DNS request.

As a consequence, packages of Nginx 1.6.2 are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” (amd64/i386).

PHP 5.4.33, for Wheezy and Squeeze

Sat, 20 Sep 2014 06:56:49 +0000

On September 18th 2014, the PHP group released PHP 5.4.33.

10 bugs were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version.

This release is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of one year. PHP 5.4 users that need further bugfixes are encouraged to upgrade to PHP 5.6 or PHP 5.5.

Redis 2.8.17

Sat, 20 Sep 2014 06:29:29 +0000

Redis 2.8.17 has been released on September 19th 2014, bringing a lot of changes.

The upgrade urgency is :

High for Redis Sentinel
Low for Redis Server (unmodified compared to 2.8.16)

The packages are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” on both amd64 and i386 architectures.

PHP 5.5.17 for Debian Wheezy

Fri, 19 Sep 2014 05:39:15 +0000

On September 18th 2014, the PHP group released PHP 5.5.17.

Several bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.17 packages are now available on Dotdeb for Debian 7.6 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.6
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.7
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.5
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Redis 2.8.15 (almost 2.8.16...)

Tue, 16 Sep 2014 14:25:59 +0000

Redis 2.8.15 has been released on September 16th 2014, bringing a lot of changes.

The upgrade urgency is :

low for Redis,
high for Sentinel.

The packages are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” on both amd64 and i386 architectures. Please note that these 2.8.15 packages include a fix for the AOF bug introduced in 2.8.15 / fixed in 2.8.16, so the next packaged version should be 2.8.17.

Redis 2.8.14

Mon, 08 Sep 2014 19:03:49 +0000

Redis 2.8.14 has been released on September 1st 2014, bringing a lot of changes.

The upgrade urgency is :

high for Lua scripting users - the server could crash because of a bug introduced in Redis 2.8.10,
otherwise low
low for Redis Sentinel.

The packages are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” on both amd64 and i386 architectures.

Zabbix 2.2.6

Wed, 27 Aug 2014 14:59:17 +0000

Zabbix 2.2.6 has been released on August 27th 2014. This release fixes known issues of Zabbix 2.2.x and introduces new minor features. Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

PHP 5.4.32, for Wheezy and Squeeze

Sat, 23 Aug 2014 12:08:05 +0000

On August 21st 2014, the PHP group has released PHP 5.4.32.

16 bugs were fixed in this release, including the following security-related issues: CVE-2014-2497, CVE-2014-3538, CVE-2014-3587, CVE-2014-3597, CVE-2014-4670, CVE-2014-4698, CVE-2014-5120. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.6
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.5
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.16 for Debian Wheezy

Fri, 22 Aug 2014 16:36:15 +0000

On August 22nd 2014, the PHP group has released PHP 5.5.16.

This release fixes several bugs against PHP 5.5.15 and resolves CVE-2014-3538, CVE-2014-3587, CVE-2014-2497, CVE-2014-5120 and CVE-2014-3597.

All PHP users are encouraged to upgrade to this new version.

PHP 5.5.16 packages are now available on Dotdeb for Debian 7.6 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.6
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.5
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Percona toolkit 2.2.10

Wed, 20 Aug 2014 14:42:18 +0000

Percona toolkit 2.2.10 is now available on Dotdeb for both Debian 7 “Wheezy” and Debian 6 “Squeeze”. This release fixes 6 bugs.

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.10 and the announcement by Hrvoje Matijakovic.

Nginx 1.6.1, for Wheezy and Squeeze

Fri, 15 Aug 2014 09:01:31 +0000

Nginx 1.6.1 has been released on August 5th 2014, with the following changes :

Security: pipelined commands were not discarded after STARTTLS command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6. Thanks to Chris Boulton.
Bugfix: the $uri variable might contain garbage when returning errors with code 400. Thanks to Sergey Bobrov.
Bugfix: in the none parameter in the smtp_auth directive; the bug had appeared in 1.5.6. Thanks to Svyatoslav Nikolsky.

As a consequence, packages of Nginx 1.6.1 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386).

PHP 5.3.29 (End of Life) for Squeeze

Fri, 15 Aug 2014 08:55:04 +0000

On August 14th 2014, the PHP group has released PHP 5.3.29.

The PHP development team announces the immediate availability of PHP 5.3.29. This release marks the end of life of the PHP 5.3 series. Future releases of this series are not planned. All PHP 5.3 users are encouraged to upgrade to the current stable version of PHP 5.5 or previous stable version of PHP 5.4, which are supported till at least 2016 and 2015 respectively.

PHP 5.3.29 contains about 25 potentially security related fixes backported from PHP 5.4 and 5.5.

PHP 5.4.31, for Wheezy and Squeeze

Sun, 27 Jul 2014 20:37:53 +0000

On July 24th 2014, the PHP group has released PHP 5.4.31. Over 10 bugs were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.6
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.4
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.15 for Debian Wheezy

Thu, 24 Jul 2014 18:35:13 +0000

On July 24th 2014, the PHP group has released PHP 5.5.15.

This release fixes several bugs against PHP 5.5.14.

All PHP users are encouraged to upgrade to this new version.

PHP 5.5.15 packages are now available on Dotdeb for Debian 7.5 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.6
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.4
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

MySQL 5.5.38 for Squeeze

Mon, 21 Jul 2014 23:20:09 +0000

Packages of MySQL 5.5.38 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures to fix some vulnerabilities and various bugs as well (the latest packaged version was 5.5.31…).

Please note that the Pinba engine has also been rebuilt to be used against this new version.

As usual, please read carefully the full Changelog before upgrading.

Zabbix 2.2.5

Sat, 19 Jul 2014 06:53:11 +0000

Zabbix 2.2.5 has been released on July 17th 2014. This release contains a security fix, fixes known issues of Zabbix 2.2.x and introduces new minor features. Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

And don’t forget, if you find Dotdeb useful, feel free to show your support.

Redis 2.8.13

Tue, 15 Jul 2014 05:09:36 +0000

Redis 2.8.13 has been released on July 14th 2014 (happy Bastille day!), bringing the following changes :

[FIX] CLIENT KILL minor backward compatibility fixes. (Salvatore Sanfilippo)
[FIX] Enable HAVE_ATOMIC for PowerPC. (Matt Stancliff)
[FIX] More robust PSYNC and AOF rewrites tests. (Salvatore Sanfilippo)
[FIX] Solaris build fixed. (Matt Stancliff, Salvatore Sanfilippo)
[NEW] The new latency monitoring feature, as documented at http://redis.io/topics/latency-monitor (Salvatore Sanfilippo)
[NEW] The COMMAND command, exposing the Redis command table as an API. (Matt Stancliff)
[NEW] Update used memory with C11 __atomic. (Matt Stancliff)

The upgrade urgency is low for Redis and Sentinel, this is a features enhancement release mostly. Since this release introduces the latency monitoring feature, Redis 2.8 users experiencing latency issues are strongly encouraged to upgrade.

Percona toolkit 2.2.9

Tue, 15 Jul 2014 05:04:59 +0000

Percona toolkit 2.2.9 is now available on Dotdeb for both Debian 7 “Wheezy” and Debian 6 “Squeeze”. This release fixes 5 bugs.

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.9 and the announcement by Hrvoje Matijakovic.

PHP 5.4.30, for Wheezy and Squeeze

Mon, 30 Jun 2014 06:02:46 +0000

On June 26th 2014, the PHP group has released PHP 5.4.30. Over 20 bugs were fixed in this release, including the following security issues: CVE-2014-3981, CVE-2014-0207, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-4049, CVE-2014-3515. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.5.14 for Debian Wheezy

Sun, 29 Jun 2014 23:23:19 +0000

On June 27th 2014, the PHP group has released PHP 5.5.14.

This release fixes several bugs against PHP 5.5.13. Also, this release fixes a total of 8 CVEs, half of them concerning the FileInfo extension.

All PHP users are encouraged to upgrade to this new version.

Please, note that this release also fixes a backward compatibility issue that has been detected in the PHP 5.5.13 release. Still, the fix in PHP 5.5.14 may break some very rare situations. As this tiny compatibility break involves security, and as security is our primary concern, we had to fix it. This concerns bug 67072. For more information about this bug and its actual resolution, please visit our upgrading guide. We apologize for any inconvenience you may have experienced with this behavior.

Zabbix 2.2.4

Sun, 29 Jun 2014 22:09:36 +0000

Zabbix 2.2.4 has been released on June 23rd 2014, coming with faster Zabbix GUI, improved usability along with a number of bug fixes. Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

And don’t forget, if you find Dotdeb useful, feel free to show your support.

Nginx 1.6.0 has been updated for Wheezy and Squeeze

Sun, 29 Jun 2014 22:05:45 +0000

Packages of Nginx 1.6.0 for Debian Wheezy and Squeeze have just been updated to fix a vulnerability in the ngx_pagespeed-embeded OpenSSL library.

The nginx-auth-ldap, nginx-cache-purge, nginx-lua and nginx-upload-progress modules have also been updated.

Redis 2.8.12

Sun, 29 Jun 2014 21:59:04 +0000

Redis 2.8.12 has been released on June 23th 2014, bringing the following changes :

[FIX / BREAKS BACKWARD COMPATIBILITY] Using SELECT inside Lua scripts no longer makes the selected DB to be set in the calling client. So Lua can still use SELECT, but the client calling the script will remain set to the original DB. Thix fixes an issue with Redis replication of Lua scripts that called SELECT without reverting the selected DB to the original one. (Salvatore Sanfilippo)
[FIX] Sentinel failover was instalbe if the master was detected as available during the failover (especially during manual failovers) because of an implementation error (lack of checking of SRI_PROMOTED flag). (Salvatore Sanfilippo)
[FIX] Cancel SHUTDOWN if initial AOF is being written. (Matt Stancliff)
[FIX] Sentinel: bind source address for outcoming connections. (Matt Stancliff).
[FIX] Less timing sensitive Sentinel tests. (Salvatore Sanfilippo).
[NEW] redis-cli --intrinsic-latency stopped with SIGINT still reports stats (Matt Stancliff)
[NEW] Sentinels broadcast an HELLO message ASAP after a failover in order to reach a consistent state faster (before it relied for periodic HELLO messages). (Salvatore Sanfilippo).
[NEW] Jemalloc updated to 3.6.0. (Salvatore Sanfilippo)
[NEW] CLIENT LIST speedup. (Salvatore Sanfilippo)
[NEW] CLIENT LIST new unique incremental ID to every client. (Salvatore Sanfilippo)
[NEW] ROLE command added. (Salvatore Sanfilippo)
[NEW] CLIENT KILL new form to kill by client type and ID (see doc at redis.io for more info). (Salvatore Sanfilippo)
[NEW] Sentinel now disconnects clients when instances are reconfigured (see http://redis.io/topics/sentinel-clients). (Salvatore Sanfilippo)
[NEW] Hiredis update to latest version. (Matt Stancliff)

Redis 2.8.11

Sun, 15 Jun 2014 18:40:27 +0000

Redis 2.8.11 has been released on June 11th 2014, bringing the following changes :

[FIX] A previous fix for Lua -> Redis numerical precision enhancement introduced a new problem. In Redis 2.8.10 commands called from Lua passing a string that “looks like” a very large number, may actually use as argument the string converted as a float. This bug is now fixed.
[FIX] Now commands other than PUSH adding elements to a list will be able to awake clients blocked in a blocking POP operation.
[FIX] Cygwin compilation fixes.

The upgrade urgency is high if you use Lua scripting, LOW otherwise.

PHP 5.4.29, for Wheezy and Squeeze

Tue, 10 Jun 2014 06:52:26 +0000

On May 29th 2014, the PHP group has released PHP 5.4.29. 16 bugs were fixed in this release, including two security issues in fileinfo extension. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.4
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4
zendopcache 7.0.3

Please also note that the default permissions on the FPM Unix socket have been fixed, in a secure way.

MySQL 5.6.19, for Debian Wheezy

Tue, 10 Jun 2014 06:07:51 +0000

MySQL 5.6.19 has been released on May 30th, 2014, fixing various bugs.

Please read the full Changelog fore more details.

The corresponding packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

Percona toolkit 2.2.8

Tue, 10 Jun 2014 06:06:15 +0000

Percona toolkit 2.2.8 is now available on Dotdeb for both Debian 7 “Wheezy” and Debian 6 “Squeeze”. This release fixes bugs and also brings new things :

pt-agent has been replaced by percona-agent. More information on percona-agent can be found in the Introducing the 3-Minute MySQL Monitor blog post.
pt-slave-restart now supports MySQL 5.6 global transaction IDs.
pt-table-checksum now has new –plugin option which is similar to pt-online-schema-change –plugin

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.8 and the announcement by Hrvoje Matijakovic.

Redis 2.8.10

Tue, 10 Jun 2014 06:05:16 +0000

Redis 2.8.10 has been released on June 5th 2014, bringing the following changes :

[FIX] IMPORTANT! A min-slaves-to-write option active in a slave totally prevented the slave from acception the master stream of commands. This release includes testes for min-slaves-to-write, and a fix for this issue.
[FIX] Sometimes DEL returned 1 for already expired keys. Fixed.
[FIX] Fix test false positive because new osx ’leaks’ output.
[FIX] PFCOUNT HLL cache invalidation fixed: no wrong value was reported but the cache was not used at all, leading to lower performances.
[FIX] Accept(2) multiple clients per readable-event invocation, and better processing of I/O while loading or busy running a timedout script. Basically now the LOADING / BUSY errors are reported at a decent speed.
[FIX] A software watchdog crash fixed.
[FIX] Fixed a Lua -> Redis numerical precision loss.
[NEW] Lua scripting engine speed improved.
[NEW] Sentinel generates one new event for humans to understand better what is happening during a failover: +config-update-from. Also the time at which a failover will be re-attempted is logged.

The upgrade urgency is high only if you use min-slaves-to-write option.

PHP 5.5.13 for Debian Wheezy

Sun, 08 Jun 2014 00:52:51 +0000

On May 29th 2014, the PHP group has released PHP 5.5.13 :

This release fixes several bugs in PHP 5.5.12, and addresses two CVEs in Fileinfo ( CVE-2014-0238 and CVE-2014-0237).

As a consequence, PHP 5.5.13 packages are now available on Dotdeb for Debian 7.5 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.4
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4

Please note that the default permissions on the FPM Unix socket have been fixed, in a secure way.

Nginx 1.6.0, for Wheezy and Squeeze

Sat, 10 May 2014 22:59:24 +0000

Nginx 1.6.0 has been released on April 24th 2014 (exactly one year after 1.4.0), incorporating many new features/enhancements developed in the 1.5.x branch :

support for SPDY 3.1,
authentication via subrequests,
SSL session ticket support,
IPv6 support for DNS,
Proxy protocol support
and more… See the full Changelog and this blog post for more details.

As a consequence, packages of Nginx 1.6.0 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386). Please note that :

PHP 5.4.28, for Wheezy and Squeeze

Thu, 08 May 2014 01:42:26 +0000

On May 1st 2014, the PHP group has released PHP 5.4.28. 9 bugs were fixed in this release, including CVE-2014-0185. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.12 for Debian Wheezy

Wed, 07 May 2014 05:44:45 +0000

On April 30th 2014, the PHP group has released PHP 5.5.12 :

This release fixes several bugs against PHP 5.5.11, as well as CVE-2014-0185 regarding PHP-FPM. All PHP users are encouraged to upgrade to this new version.

As a consequence, PHP 5.5.12 packages are now available on Dotdeb for Debian 7.4 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Redis 2.8.9

Wed, 30 Apr 2014 19:57:51 +0000

Redis 2.8.9 has been released on April 22nd 2014, bringing the HyperLogLog data structure…

You can read more about it in this blog post. Beside this great announcement, the “Sorted Set” data type has now support for lexicographic range queries, check the new commands ZRANGEBYLEX, ZLEXCOUNT and ZREMRANGEBYLEX, which are documented at http://redis.io.

The upgrade urgency is low because only new features were introduced, no bugs were fixed.

The packages are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Zabbix 2.2.3

Tue, 08 Apr 2014 05:38:56 +0000

Zabbix 2.2.3 has been released on April 7th 2014. It introduces more efficient SNMP polling (and much faster Oracle back-end). Please read the release notes for more info.

As usual, the packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

And don’t forget, if you find Dotdeb useful, feel free to show your support.

PHP 5.4.27, for Wheezy and Squeeze

Sun, 06 Apr 2014 06:19:46 +0000

On April 3rd 2014, the PHP group has released PHP 5.4.27. 6 bugs were fixed in this release, including CVE-2013-7345. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.11 for Debian Wheezy

Fri, 04 Apr 2014 06:00:52 +0000

On April 2nd 2014, the PHP group has released PHP 5.5.11 :

Several bugs were fixed in this release, some bundled libraries updated and a security issue has been fixed : CVE-2013-7345. We recommand all PHP 5.5 users to upgrade to this version.

As a consequence, PHP 5.5.11 packages are now available on Dotdeb for Debian 7.4 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

About the "mysql_connect(): Headers and client library minor version mismatch" warning

Thu, 03 Apr 2014 23:54:20 +0000

After having MySQL 5.6.17 published, some users complained about a warning thrown by their PHP applications :

PHP Warning: mysql_connect(): Headers and client library minor version mismatch. Headers:50535 Library:50617

In fact, this could happen with any application linked to libmysqlclient18 in a certain version ( php5-mysql from Dotdeb is linked to the 5.5.35 version from the stock Debian distribution) when connecting to a MySQL server in another version (5.6.17 in our case). The warning is thrown by libmysqlclient18 itself. And this is just a warning, there is no reason why any bad behavior would happen in that case.

MySQL 5.6.17 for Wheezy

Wed, 02 Apr 2014 05:16:04 +0000

After months of work in (slow) progress, I’m glad to announce that packages of MySQL 5.6.17 are now available for Debian 7.4 “Wheezy” on both amd64 and i386 architectures.

This is our first major release of the MySQL 5.6 branch, so be very careful when upgrading your boxes : backup your data first, keep a spare/ delayed MySQL slave… And be sure to know in details what’s new in MySQL 5.6 :

Redis 2.8.8

Wed, 26 Mar 2014 07:54:11 +0000

Redis 2.8.8 has been released on March 25th 2014, bringing a lot of fixes… Take a look at the Changelog for more details.

The upgrade urgency is high for Redis, low for Sentinel. There is a potentially critical bug fix causing data loss in Redis but it requires a combination of disk full and the use of the SHUTDOWN command.

The packages are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Security : Nginx 1.4.7, for Wheezy and Squeeze

Wed, 19 Mar 2014 05:50:58 +0000

Nginx 1.4.7 has been released on March 18th 2014, fixing a potential heap memory buffer overflow when using SPDY, and also the fastcgi_next_upstream directive. More info in the changelog.

As a consequence, Dotdeb’s packages of Nginx 1.4.7 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386).

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

PHP 5.4.26, for Wheezy and Squeeze

Fri, 07 Mar 2014 11:05:08 +0000

On March 7th 2014, the PHP group has released PHP 5.4.26. 5 bugs were fixed in this release, including CVE-2014-1943. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.10, for Debian 7.0 "Wheezy"

Thu, 06 Mar 2014 21:10:59 +0000

On March 6th 2014, the PHP group has released PHP 5.5.10. Several bugs were fixed in this release, including security issues related to CVEs. CVE-2014-1943, CVE-2014-2270 and CVE-2013-7327 have been addressed in this release. All PHP 5.5 users should upgrade to this version.

As a consequence, PHP 5.5.10 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Percona toolkit 2.2.7

Thu, 06 Mar 2014 18:36:29 +0000

Percona toolkit 2.2.7 is now available on Dotdeb for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”. This release fixes one security bug. An upgrade is recommended.

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.7 and the announcement by Hrvoje Matijakovic.

Redis 2.8.7

Thu, 06 Mar 2014 17:02:06 +0000

Redis 2.8.7 has been released on March 5th 2014, bringing a lot of fixes… Take a look at the Changelog for more details.

The upgrade urgency is low for Redis, low for Sentinel. However this release adds new features so users may want to upgrade in order to exploit the new functionalities.

The packages are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Security : Nginx 1.4.6, for Wheezy and Squeeze

Thu, 06 Mar 2014 16:50:43 +0000

Nginx 1.4.6 has been released on March 4th 2014, fixing client_max_body_size when used with chunked transfer encoding and a segfault when proxying WebSocket connections. More info in the changelog.

As a consequence, Dotdeb’s packages of Nginx 1.4.6 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386), with some extra changes :

nginx-auth-ldap is now available in nginx-extras,
modules have been updated.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Redis 2.8.6

Wed, 19 Feb 2014 08:25:05 +0000

Redis 2.8.6 has been released on February 13th 2014, bringing the following changes (take a look at the Changelog) :

[FIX] Fixed an critical EVALSHA script cache bug: scripts executed may not propagate to AOF / Slaves correctly under certain conditions. See issue #1549 at Github for more information.
[FIX] Fixed multiple bugs resulting into closing the link with master or slave during replication without good reasons. This will result in useless resynchronizations, or infinite loops where the replication link can’t be established.
[FIX] Don’t count the time needed to populate the buffers of clients waiting in MONITOR mode when populating the Slow Log entries.
[NEW] AOF write errors (like no space on device) no longer abort Redis if the fsync policy is none or every second. The database enters a read-only mode where every write is refused with an error. Normal operations are restored as soon as Redis is able to append again data to the AOF file.
[NEW] Sentinel now accepts SHUTDOWN command.

The upgrade urgency is high for Redis, low for Sentinel. Redis users using Lua scripts with EVALSHA and attached slaves and/or AOF persistence should consider upgrading ASAP.

Zabbix 2.2.2

Fri, 14 Feb 2014 08:00:27 +0000

Zabbix 2.2.2 has been released on February 12th 2014. Compared to the latest packaged version (2.0.9), it’s a major bump, so be sure to read about the new features and upgrade notes to Zabbix 2.2, as well as the specific changes in Zabbix 2.2.2.

The packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

with a new feature : the Java gateway, packaged as zabbix-java-gateway.

Nginx 1.4.5 for Wheezy and Squeeze

Wed, 12 Feb 2014 07:27:56 +0000

Nginx 1.4.5 has been released on February 11th 2014, fixing 7 bugs. More info in the changelog.

As a consequence, Dotdeb’s packages of Nginx 1.4.5 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386). Pagespeed and some more modules have been updated, dependencies have been reviewed and proxy settings have been improved (all this according to the Debian Sid changes).

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

PHP 5.4.25, for Wheezy and Squeeze

Mon, 10 Feb 2014 07:27:34 +0000

On February 6th 2014, the PHP group has released PHP 5.4.25. 5 bugs were fixed, all PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

PHP 5.5.9 for Debian 7.0 "Whezzy"

Mon, 10 Feb 2014 03:58:18 +0000

On February 5th 2014, the PHP group has released PHP 5.5.9. This release fixes several bugs against PHP 5.5.8.

As a consequence, PHP 5.5.9 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

And don’t forget: if you find Dotdeb useful, you may want to show your support.

Redis 2.8.5

Mon, 10 Feb 2014 03:54:54 +0000

Redis 2.8.5 has been released on February 4th 2014, bringing the following changes (take a look at the Changelog) :

[FIX] Fixed a replication bug caused by Lua scripts + expired keys: keys could expire in the middle of scripts causing non-deterministic behavior.
[FIX] MISCONFIG error if condition fixed, the server was no longer able to stop writes on RDB misconfiguration after this error was introduced.
[FIX] REDIS_AOF_REWRITE_MIN_SIZE is now 64mb like example redis.conf default.
[FIX] Perform fflush() before fsync() in rio.c (bug without actual effects).
[FIX] Don’t log MONITOR clients as disconnecting slaves.
[FIX] SENTINEL MASTER arity check fixed. Crashed the Sentinel instance when the command was given without arguments.
[NEW] Allow CONFIG and SHUTDOWN while in stale-slave state.
[NEW] Support for configurable TCP listen(2) backlog size.
[NEW] redis-cli supports SCAN via the --scan and --pattern options.
[NEW] SENTINEL SET master quorum via runtime API implemented.

The upgrade urgency high for Redis, low for Sentinel. Redis users using Lua scripts with expires, and Redis users relying on the ability of Redis to block writes on RDB saving errors should plan to upgrade a.s.a.p.

Redis 2.8.4

Fri, 24 Jan 2014 06:34:44 +0000

Redis 2.8.4 has been released on January 13th 2014, bringing the following changes (take a look at the Changelog) :

[FIX] Makefile compatibility with non common make variants improved.
[FIX] SDIFF crash in very unlikely to trigger state fixed.
[FIX] Config rewriting fixed: don’t wipe options unknown to the rewrite process.
[FIX] Set TCP port to 0 works again to disable TCP networking.
[FIX] Fixed replication with old Redis instances as masters by not sending REPLCONF ACK to them.
[FIX] Fix keyspace notifications rewrite and CONFIG GET output.
[FIX] Fix RESTORE TTL handling in 32 bit systems (32 bit overflow).
[NEW] Sentinel now has a run time configuration API.
[NEW] Log when we lost connection with master or slave.
[NEW] When instance is turned from slave to master now inherits the old master replication offset when possible. This improves the Sentinel failover procedure.

The upgrade urgency is moderate for Redis and Sentinel.

Percona toolkit 2.2.6

Fri, 24 Jan 2014 06:11:21 +0000

Percona toolkit 2.2.6 is now available on Dotdeb for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”. This release has 16 bug fixes and a few new features. One bug fix is very important, so 2.2 users are strongly encouraged to upgrade.

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.6 and the announcement by Hrvoje Matijakovic.

PHP 5.4.24, for Wheezy and Squeeze

Mon, 13 Jan 2014 03:33:02 +0000

On January 10th 2014, the PHP group has released PHP 5.4.24. About 14 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

PHP 5.5.8, for Debian 7.0 "Wheezy"

Sun, 12 Jan 2014 08:02:30 +0000

On January 10th 2014, the PHP group has released PHP 5.5.8. This release fixes about 20 bugs against PHP 5.5.7 components.

As a consequence, PHP 5.5.8 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Last but not least, if you find Dotdeb useful, you may want to show your support.

PHP 5.5.7, for Debian 7.0 "Wheezy"

Sun, 15 Dec 2013 21:53:08 +0000

On December 12th 2013, the PHP group has released PHP 5.5.7. This release fixes some bugs against PHP 5.5.6 and it also includes a fix for CVE-2013-6420 in OpenSSL extension. All users are strongly encouraged to upgrade.

As a consequence, PHP 5.5.7 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.23, for Wheezy and Squeeze

Sat, 14 Dec 2013 02:39:53 +0000

On December 12th 2013, the PHP group has released PHP 5.4.23. About 10 bugs were fixed, including a security issue in OpenSSL module ( CVE-2013-6420). All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Redis 2.8.3

Fri, 13 Dec 2013 21:02:43 +0000

Redis 2.8.3 has been released, bringing the following changes (take a look at the Changelog) :

[FIX] Sentinel instance role sampling fixed, the system is now more reliable during failover and when reconfiguring instances with non matching configuration.
[FIX] Inline requests are now handled even when terminated with just LF.
[FIX] Replication timeout handling greatly improved, now the slave is able to ping the master while removing the old data from memory, and while loading the new RDB file. This avoid false timeouts sensed by masters.
[FIX] Fixed a replication bug involving 32 bit instances and big datasets hard to compress that resulted into more than 2GB of RDB file sent.
[FIX] Return error for inline requests with unbalanced quotes.
[FIX] Publish the slave replication offset even when disconnected from the master if there is still a cached master instance.

The upgrade urgency is moderate for Redis, high for Sentinel.

PHP 5.3.28 for Squeeze

Fri, 13 Dec 2013 15:55:06 +0000

On December 12th 2013, the PHP group has released PHP 5.3.28.

The PHP development team announces the immediate availability of PHP 5.3.28. This release fixes two security issues in OpenSSL module in PHP 5.3 - CVE-2013-4073 and CVE-2013-6420. All PHP 5.3 users are encouraged to upgrade to PHP 5.3.28 or latest versions of PHP 5.4 or PHP 5.5.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze”, on both amd64 and i386 architectures.

Redis 2.8.2

Sun, 08 Dec 2013 03:45:20 +0000

Redis 2.8.2 has been released and packaged for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” on both amd64 and i386 architectures. This is a major version that brings the following big changes :

Partial resynchronization with slaves. It is no longer needed to transfer all the data set from the master to the slave if the link is interrupted for a short time: http://antirez.com/news/47
SCAN / HSCAN / ZSCAN / SSCAN: http://antirez.com/news/63
CONFIG REWRITE: http://antirez.com/news/54
IPv6 support.
Scripting improvements ( EVALSHA replication).
Better key expiring algorithm.
Keyspace events notification via Pub/Sub: http://redis.io/topics/notifications
Better consistency support with the ability to stop writes if there are not at least N slaves that are not lagged more than M milliseconds.
A number of additional small features and bugs fixed.

About Sentinel

Redis Sentinel was rewritten from scratch to be more reliable. Redis 2.8 contains the new implementation, and every patch release of 2.8 will include the updates. Basically Sentinel is as usually kept in sync between stable and unstable branches.

PHP 5.4.22, for Wheezy and Squeeze

Mon, 02 Dec 2013 01:46:34 +0000

On November 14th 2013, the PHP group has released PHP 5.4.22. About 10 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Please note that Opcache ( php5-zendopcache) and APCu ( php5-apcu) have been packaged to ease your migration to PHP 5.5.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Security : Nginx 1.4.4 for Wheezy and Squeeze

Tue, 19 Nov 2013 18:45:04 +0000

Nginx 1.4.4 has been released on November 19th 2013, fixing a request line parsing vulnerability by Ivan Fratric of the Google Security Team (CVE-2013-4547). More info in the changelog.

As a consequence, Dotdeb’s packages of Nginx 1.4.4 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386).

Reminder : Users of naxsi-ui should be aware that it has been deprecated in the upcoming Naxsi 0.53 and that it won’t be provided by Dotdeb starting with the next Nginx packages.

PHP 5.5.6, for Debian 7.0 "Wheezy"

Tue, 19 Nov 2013 02:55:12 +0000

On November 14th 2013, the PHP group has released PHP 5.5.6. This release fixes some bugs against PHP 5.5.5, and adds some performance improvements.

As a consequence, PHP 5.5.6 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Last but not least, if you find Dotdeb useful, you may want to show your support.

Percona toolkit 2.2.5

Tue, 05 Nov 2013 04:55:21 +0000

Percona toolkit 2.2.5 is now available on Dotdeb for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”. It fixes 5 bugs as well as 4 new features.

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.5 and the announcement by Hrvoje Matijakovic.

PHP 5.5.5, for Debian 7.0 "Wheezy"

Mon, 04 Nov 2013 04:27:56 +0000

On October 16th 2013, the PHP group has released PHP 5.5.5. This release fixes about twenty bugs against PHP 5.5.4, some of them regarding the build system. All PHP users are encouraged to upgrade to this new version.

As a consequence, PHP 5.5.5 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures. And good news, Xcache is back with the php5-xcache package!

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.21, for Wheezy and Squeeze

Sun, 03 Nov 2013 19:01:21 +0000

On October 17th 2013, the PHP group has released PHP 5.4.21. About 10 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

Nginx 1.4.3 for Wheezy and Squeeze

Sat, 02 Nov 2013 18:32:20 +0000

Nginx 1.4.3 has been released on October 8th 2013, fixing 6 bugs ( see the changes).

As a consequence, Dotdeb’s packages of Nginx 1.4.3 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

the http_geoip module in now included in nginx-naxsi
PageSpeed has been upgraded to 1.6.29.7 to fix CVE-2013-6111 ( nginx-extras only)
Various modules has been updated

Users of naxsi-ui should be aware that it has been deprecated in the upcoming Naxsi 0.53 and that it won’t be provided by Dotdeb starting with the next Nginx packages.

Zabbix 2.0.9

Wed, 09 Oct 2013 05:26:43 +0000

Zabbix 2.0.9 has been released on October 8th 2013. It fixes critical security issues, as well as known issues of Zabbix 2.0.x, and introduces new minor features (take a look at the Zabbix 2.0.9 release notes for more info).

The packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

PHP 5.5.4, for Debian 7.0 "Wheezy"

Sun, 22 Sep 2013 21:08:27 +0000

On September 19th 2013, the PHP group has released PHP 5.5.4. This release fixes several bugs against PHP 5.5.3. All PHP users are encouraged to upgrade to this new version.

As a consequence, PHP 5.5.4 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.20, for Wheezy and Squeeze

Sun, 22 Sep 2013 02:55:33 +0000

On September 19th 2013, the PHP group has released PHP 5.4.20. About 30 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

PHP 5.5.3, for Debian 7.0 "Wheezy"

Thu, 29 Aug 2013 22:10:28 +0000

On August 22nd 2013, the PHP group has released PHP 5.5.3. Since the previously-packaged PHP 5.5.1 version, about 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248) and session fixation problem (CVE-2011-4718).

As a consequence, PHP 5.5.3 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures, with the following changes :

each SAPI (apache2, apache2filter, CLI, CGI, FPM, embed) has now its own /etc/php5/SAPI/conf.d/ subdirectory, not just a symlink to a common one, so it can have its own list of activated modules (it involved some more tests, so sorry for the delay),
the php5-mongo package is now available, allowing you interacting with MongoDB servers,
the php5-fpm init script now reports syntax errors with full error messages.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Redis 2.6.16

Thu, 29 Aug 2013 04:19:46 +0000

Redis 2.6.16 has been released, bringing the following changes (take a look at the Changelog) :

[FIX] Stop writes when fork() fails when trying to BGSAVE. BGSAVE errors were trapped only in the case the saving child failed, so the fork() error was no trapped as no child is created at all.
[FIX] Fix a serious memory efficiency regression, Redis 2.6.16 is significantly better with large values (>= a few kbytes) and will be able to store two times the amount of data compared to Redis 2.6.15 when values are in that range.
[FIX] Fixed an issue with Table conversion in the lua-cmsgpack library exposed by the Redis scripting engine.
[NEW] DEBUG SDSLEN was introduced to debug memory inefficiencies due to SDS allocation more easily.

The upgrade urgency is moderate.

PHP 5.4.19, for Wheezy and Squeeze

Tue, 27 Aug 2013 04:50:59 +0000

On August 22nd 2013, the PHP group has released PHP 5.4.19. It fixes a bug in the patch for CVE-2013-4248 in OpenSSL module. All PHP users are encouraged to upgrade to PHP 5.4.19.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Redis 2.6.15

Wed, 21 Aug 2013 22:42:07 +0000

Redis 2.6.15 has been released, bringing the following changes (take a look at the Changelog) :

[FIX] Improved expired keys collection algorithm. Even under heavy load keys to be expired can’t accumulate because of lack of CPU time.
[FIX] Fixed Issue #1240, ZUNIONSTORE could lead to wrong result.
[NEW] redis-benchmark improvements.
[NEW] dict.c API wrong usage detection.

Be aware that redis-benchmark released with 2.6.15 features non backward compatible change in the way the random arguments are specified, use the --help option for more information.

Zabbix 2.0.8

Wed, 21 Aug 2013 22:35:23 +0000

Zabbix 2.0.8 has been released on August 21st 2013. It fixes known issues of Zabbix 2.0.x and introduces new minor features (take a look at the Zabbix 2.0.8 release notes for more info).

The packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

PHP 5.4.18, for Wheezy and Squeeze

Wed, 21 Aug 2013 17:56:40 +0000

On August 15th 2013, the PHP group has released PHP 5.4.18.

About 30 bugs were fixed, including security issues CVE-2013-4113 and CVE-2013-4248. All users of PHP are encouraged to upgrade to this release.

On the Dotdeb side,

the php5-mongo package is now available, allowing you interacting with MongoDB servers,
the php5-fpm init script now reports syntax errors with full error messages.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.1 for Debian 7.0 "Wheezy"

Sat, 03 Aug 2013 23:36:33 +0000

On July 18th 2013, the PHP group has released PHP 5.5.1. About 20 bugs were fixed including a security fix in the XML parser (Bug #65236).

As a consequence, PHP 5.5.1 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Last but not least, if you like Dotdeb, feel free to show your support.

Zabbix 2.0.7

Thu, 01 Aug 2013 19:12:08 +0000

Zabbix 2.0.7 has been released on July 31st 2013. It fixes known issues of Zabbix 2.0.x and introduces new minor features (take a look at the Zabbix 2.0.7 release notes for more info).

The packages are now available :

for Debian 7.0 “Wheezy and 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Percona toolkit 2.2.4

Wed, 31 Jul 2013 01:03:59 +0000

Percona toolkit 2.2.4 is now available on Dotdeb for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”. It fixes 4 bugs as well as 2 new features :

pt-query-digest has a new option, --output json-anon, that provides the same data as --output json without query examples
pt-online-schema-change now outputs the current timestamp for operations that may take a while

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.4 and the announcement by Hrvoje Matijakovic.

Nginx 1.4.2 for Wheezy and Squeeze

Tue, 30 Jul 2013 18:11:21 +0000

Nginx 1.4.2 has been released on July 17th 2013, fixing 6 bugs ( see the changes).

As a consequence, Dotdeb’s packages of Nginx 1.4.2 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

SPDY had been enabled in all the Nginx flavors (Wheezy only)
PageSpeed 1.6.25.9 has been added to nginx-extras
ngx-fancyindex has been added to nginx-extras
Various modules has been updated
Naxsi-ui now uses Sqlite instead of MySQL

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

PHP 5.3.27 for Squeeze

Thu, 25 Jul 2013 21:59:04 +0000

On July 11th 2013, the PHP group has released PHP 5.3.27.

The PHP development team announces the immediate availability of PHP 5.3.27. About 10 bugs were fixed, including a security fix in the XML parser (Bug #65236).

Please Note: This will be the last regular release of the PHP 5.3 series. All users of PHP are encouraged to upgrade to PHP 5.4 or PHP 5.5. The PHP 5.3 series will receive only security fixes for the next year.

PHP 5.4.17, for Wheezy and Squeeze

Sat, 06 Jul 2013 19:17:09 +0000

On July 4th 2013, the PHP group has released PHP 5.4.17.

About 20 bugs were fixed. All users of PHP are encouraged to upgrade to this release.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you like Dotdeb, feel free to show your support.

Percona toolkit 2.2.3

Mon, 01 Jul 2013 00:54:50 +0000

Percona toolkit 2.2.3 is now available on Dotdeb for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”. It fixes bugs in the previous release and includes the following changes :

pt-online-schema-change did not handle the failure of the DROP TRIGGER statements correctly
Created pt-agent
pt-query-digest –output json now includes more data

As usual, before upgrading, please read the list of changes for Percona toolkit 2.2.3 and the announcement by Matt Griffin.

PHP 5.5.0 is out and available for Debian 7.0 "Wheezy"

Thu, 20 Jun 2013 19:06:44 +0000

On June 20th 2013, the PHP group has released the first stable version of PHP 5.5.

The key features of PHP 5.5.0 include:

Added generators and coroutines.
Added “finally” keyword.
Added simplified password hashing API.
Added support for constant array/string dereferencing.
Added Class Name Resolution As Scalar Via “class” Keyword
Added support for using empty() on the result of function calls and other expressions
Added support for non-scalar Iterator keys in foreach
Added support for list in foreach
Added Zend Opcache extension and enable building it by default.
The GD library has been upgraded to version 2.1 adding new functions and improve existing functionality.
A lot more improvements and fixes

Changes that affect compatibility:

Redis 2.6.14, for Debian Wheezy and Squeeze

Thu, 20 Jun 2013 17:17:48 +0000

Redis 2.6.14 has been released, bringing the following changes (take a look at the Changelog) :

[FIX] AOF bug: expire could be removed from key on AOF rewrite.
[FIX] Allow writes from scripts called by AOF loading in read-only slaves.
[FIX] Sentinel: parse new version of INFO replication output correctly.
[NEW] Reset masterauth if an empty string is configured.

The upgrade urgency is HIGH because of the following two issues:

Lua scripting + Replication + AOF in slaves problem (see Issue #1164).
AOF + expires possible race condition (see Issue #1079).

The packages are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Preview : PHP 5.5.0 RC3 for Debian 7.0 "Wheezy"

Sun, 16 Jun 2013 20:43:26 +0000

If everything goes well, PHP 5.5.0 will be available later this month. This major release brings better overall performance and a lot of new features.

On June 6th 2013, the PHP group has released the third release candidate of PHP 5.5.0. As a consequence, I’m proud to announce that the corresponding packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

To upgrade to PHP 5.5.0-RC3, just add these two lines to your sources.list :

PHP 5.3.26 for Squeeze

Sun, 09 Jun 2013 04:46:22 +0000

On June 6th 2013, the PHP group has released PHP 5.3.26.

These releases fix about 15 bugs, including CVE-2013-2110. All users of PHP are encouraged to upgrade to PHP 5.4.16.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze”, on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you like Dotdeb, feel free to show your support.

PHP 5.4.16 for Wheezy and Squeeze

Sun, 09 Jun 2013 01:49:16 +0000

On June 6th 2013, the PHP group has released PHP 5.4.16.

These releases fix about 15 bugs, including CVE-2013-2110. All users of PHP are encouraged to upgrade to PHP 5.4.16.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Please note that php5-readline is now a separate package and that php5-pinba is back.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

MySQL 5.5.31 for Squeeze

Sun, 19 May 2013 04:09:08 +0000

Packages of MySQL 5.5.31 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fix some serious vulnerabilities and InnoDB-, partition- and replication-related bugs as well.

Please note that the Pinba engine has also been rebuilt to be used against this new version.

As usual, please read carefully the full Changelog before upgrading.

PHP 5.4.15 & PHP 5.3.25 / for Wheezy & Squeeze

Sun, 12 May 2013 08:21:54 +0000

On May 9th 2013, the PHP group has released PHP 5.4.15 and PHP 5.3.25.

These releases fix about 10 bugs aswell as upgrading the bundled libmagic library. All users of PHP are encouraged to upgrade to PHP 5.4.15.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Please note that the php5-ffmpeg and php5-pinba packages for PHP 5.4 are missing on Wheezy. They should appear in the next few days, after their source code has been made compatible with Debian’s multi-arch scheme.

Percona toolkit 2.2.2

Tue, 07 May 2013 16:48:13 +0000

Percona toolkit 2.2.2 is now available on Dotdeb for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”. It fixes bugs in the previous release and provide usability enhacements to the toolkit.

As usual, please read the list of changes for Percona toolkit 2.2.2 before upgrading.

Security : Nginx 1.4.1

Tue, 07 May 2013 14:12:53 +0000

Nginx 1.4.1 has been released on May 7th 2013, with the fix for the stack-based buffer overflow security problem in nginx 1.3.9 - 1.4.0, discovered by Greg MacManus, of iSIGHT Partners Labs (CVE-2013-2028).

As a consequence, Dotdeb’s packages of Nginx 1.4.1 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386).

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Debian 7.0 "Wheezy" has been released

Sun, 05 May 2013 09:37:13 +0000

Now that Debian 7.0 “Wheezy” has been released, I’m glad to announce that it’s supported by Dotdeb. Feel free to change your sources.list and to upgrade your boxes.

About Wheezy & Dotdeb

Wheezy is supported as of today and these packages will be maintained :

PHP : 5.4 and 5.5 (as soon as it’s GA)
MySQL : 5.6 or equivalent (Percona Server, MariaDB…)
Nginx
Redis
Zabbix
Percona toolkit

(PHP 5.4, Zabbix and Percona toolkit packages are missing now, they will appear in the next few days)

Redis 2.6.13, for Debian Wheezy and Squeeze

Wed, 01 May 2013 02:56:45 +0000

Redis 2.6.13 has been released, bringing the following changes (take a look at the Changelog) :

[FIX] Throttle BGSAVE attempt on saving error.
[FIX] redis-cli: raise error on bad command line switch.
[FIX] Redis/Jemalloc Gitignore were too aggressive.
[FIX] Test: fix RDB test checking file permissions.
[FIX] Sentinel: always redirect on master->slave transition.
[FIX] Lua updated to version 5.1.5. Fixes rare scripting issues.
[NEW] AOF: improved latency figures with slow/busy disks.
[NEW] Sentinel: turn old master into a slave when it comes back.
[NEW] More explicit panic message on out of memory.
[NEW] redis-cli: --latency-history mode implemented.

The upgrade urgency is moderate, nothing very critical but upgrading is suggested if you experienced:

Nginx 1.4.0, for Wheezy and Squeeze

Sun, 28 Apr 2013 20:47:30 +0000

Nginx 1.4.0 stable version has been released on April 24th 2013, incorporating many new features developed in the 1.3.x branch :

support for proxying of WebSocket connections,
OCSP stapling,
SPDY module,
gunzip filter,
and more… See the full Changelog for more details.

As a consequence, Dotdeb’s packages of Nginx 1.4.0 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

(Wheezy only) SPDY support has been enabled in nginx-extras and nginx-full.
(Wheezy only) the nginx-passenger flavor has been removed. You should use unicorn or uwsgi-plugin-rack-ruby* instead.
nginx-extras now supports HTTP Gunzip.
Naxsi has been upgraded to 0.50.
chunkin-nginx-module (useless now) and nginx-upload-module (incompatible with 3.1.8+) are no longer supported.
The headers-more, echo, lua, Push stream, Pinba and Passenger modules got minor upgrades.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Zabbix 2.0.6

Tue, 23 Apr 2013 04:24:19 +0000

Zabbix 2.0.6 has been released today, bringing new translation, better performance at low-level discovery and bug fixes (take a look at the Zabbix 2.0.6 release notes for more info).

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

PHP 5.3.24

Mon, 22 Apr 2013 04:44:39 +0000

On April 11th 2013, the PHP group has released PHP 5.3.24.

These releases fix about 10 bugs aswell as upgrading the bundled PCRE library. All users of PHP are encouraged to upgrade to PHP 5.4.14.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes. As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.14

Sun, 21 Apr 2013 21:12:00 +0000

On April 11th 2013, the PHP group has released PHP 5.4.14.

These releases fix about 10 bugs aswell as upgrading the bundled PCRE library. All users of PHP are encouraged to upgrade to PHP 5.4.14.

Nginx 1.2.8

Sun, 07 Apr 2013 00:52:24 +0000

Nginx 1.2.8 has been released with 4 bugfixes. See the full Changelog for more details.

As a consequence, Dotdeb’s packages of Nginx 1.2.8 are now available for Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

The config of the default vhost is now ok by default (see [Edit]).
The X-rid header module has been added to all the Nginx flavors.
The chunkin-nginx-module, headers-more-nginx-module, nginx-cache-purge, nginx-echo, nginx-lua, nginx-push-stream-module and ngx_http_substitution_filter_module modules have been updated.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Redis 2.6.12

Sun, 31 Mar 2013 18:30:22 +0000

Redis 2.6.12 has been released, bringing the following changes (take a look at the Changelog) :

[BUGFIX] redis-cli --bigkeys: don’t crash with empty DB.
[BUGFIX] stop-writes-on-bgsave-error now works in redis.conf
[BUGFIX] Don’t crash at startup if RDB is there but can’t be opened.
[BUGFIX] Initial value for master_link_down_since_seconds is now huge.
[BUGFIX] Allow SELECT while loading the DB.
[BUGFIX] Don’t replicate/AOF an empty MULTI/EXEC if the transaction is empty or containing just read-only commands.
[BUGFIX] EXPIRE should not be able to resurrect keys (see issue #1026).
[IMPROVED] Extended SET back ported from Redis 2.8 / unstable. See http://redis.io/commands/set for more information.
[IMPROVED] Test suite improved.

The upgrade urgency is moderate, nothing very critical but a few non trivial bugs.

Percona toolkit 2.2.1

Tue, 26 Mar 2013 15:56:32 +0000

Percona toolkit 2.2.1 is now available on Dotdeb for Debian 6.0 “Squeeze”. It supports MySQL 5.6 and Percona XtraDB Cluster, and brings some more changes :

pt-online-schema-change ( pt-osc) is much more resilient
pt-upgrade is brand-new
pt-query-digest is simpler
Version check is on by default
pt-query-advisor, pt-tcp-model, pt-trend, and pt-log-player are gone
pt-stalk and pt-mysql-summary have built-in MySQL options
pt-stalk --no-stalk is no longer magical
pt-fk-error-logger and pt-deadlock-logger are standardized

As usual, please read the list of changes for Percona toolkit 2.2.1 before upgrading.

PHP 5.3.23

Tue, 26 Mar 2013 11:14:48 +0000

On March 14th 2013, the PHP group has released PHP 5.3.23.

These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :

php5-xdebug as been upgraded to version 2.2.2
php5-apc fixes a bug in relative path search when apc.stats = 0

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.13

Thu, 21 Mar 2013 22:45:10 +0000

On March 14th 2013, the PHP group has released PHP 5.4.13.

These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :

php5-ffmpeg is now compatible with PHP 5.4
php5-apc fixes a bug in relative path search when apc.stats = 0

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Redis 2.6.11

Tue, 12 Mar 2013 16:52:42 +0000

Redis 2.6.11 has been released, bringing the following changes (take a look at the Changelog) :

[BUGFIX] Replication: more strict error checking for master PING reply.
[BUGFIX] redis-cli: use keepalive socket option for improved reliability.
[BUGFIX] Allow AUTH while loading the DB in memory.
[BUGFIX] Don’t segfault on unbalanced quotes while parsing config file.
[IMPROVED] serverCron() frequency is now a runtime parameter (was REDIS_HZ).
[IMPROVED] Use a lot less CPU when idle, even with many configured DBs.

The upgrade urgency is low, however updating is encouraged if you have many instances per server and you want to lower the CPU / energy usage.

PHP 5.3.22

Sun, 03 Mar 2013 12:05:37 +0000

On february 21st 2013, the PHP group has released PHP 5.3.22.

This releases fix about 10 bugs. Beside that, all users of PHP are encouraged to upgrade to PHP 5.4.12

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.12

Fri, 01 Mar 2013 14:03:31 +0000

On february 21st 2013, the PHP group has released PHP 5.4.12.

This releases fix about 10 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.12

Note : PHP 5.3.22 packages will be available at the end of this week.

Percona toolkit 2.1.9

Tue, 19 Feb 2013 19:30:32 +0000

Percona toolkit 2.1.9 is now available on Dotdeb for Debian 6.0 “Squeeze”. It includes many bug fixes and it is worth upgrading to, especially if you were affected by the backwards-incompatible changes to pt-heartbeat in 2.1.8. Take a look at this blog post by Daniel Nichter for more info.

As usual, please read the list of changes for Percona toolkit 2.1.9 before upgrading.

Nginx 1.2.7

Tue, 12 Feb 2013 21:35:05 +0000

Today, Nginx 1.2.7 has been released with a few new features but also bugfixes merged from 1.3.x. See the full Changelog for more details.

As a consequence, Dotdeb’s packages of Nginx 1.2.7 are now available for Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

Logs are now rotated on a weekly basis.
Passenger has been upgraded to the 3.0.19 version.
The chunkin-nginx-module, nginx-lua and nginx-upload-module modules got minor updates.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Zabbix 2.0.5

Tue, 12 Feb 2013 13:40:18 +0000

Zabbix 2.0.5 has been released today, bringing new minor features and bug fixes (take a look at the Zabbix 2.0.5 release notes for more info).

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Redis 2.6.10

Mon, 11 Feb 2013 13:18:28 +0000

Redis 2.6.10 has been released today, bringing many non-critical fixes and many small improvements (take a look at the Changelog) :

[BUGFIX] redis-cli --rdb, fixed when the server sends newlines to ping.
[BUGFIX] redis-cli, minor fixes on connection handling, prompt.
[BUGFIX] Slow log: don’t log EXEC, just executed commands.
[BUGFIX] On failed shutdown don’t try again and again compulsively.
[BUGFIX] Fix build on sunos without backtrace().
[BUGFIX] UNSUBSCRIBE and PUNSUBSCRIBE: always provide a reply (see 742e580)
[BUGFIX] Lua struct library was broken, upgraded.
[BUGFIX] Fix a bug in srandmemberWithCountCommand() with count argument.
[BUGFIX] Test: disable clients timeout to prevent issues on slow systems.
[BUGFIX] Sentinel: don’t advertise the promoted slave as master too early.
[IMPROVED] Whitelist SIGUSR1, see http://redis.io/topics/signals.
[IMPROVED] Simpler to understand redis-cli --bigkeys output.
[IMPROVED] Test now works with tclsh > 8.5.
[IMPROVED] Added option to turn of the Nagle algorithm in slave socket.
[IMPROVED] Optionally use SO_KEEPALIVE to detect dead peers.

The upgrade urgency is moderate.

MySQL 5.5.30

Tue, 05 Feb 2013 20:18:19 +0000

Packages of MySQL 5.5.30 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes some InnoDB-, partition- and replication-related issues and some more bugs. And a new configuration directive, called innodb_print_all_deadlocks, has been backported from MySQL 5.6.

Please note that the Pinba engine has also been rebuilt to be used against this new version.

As usual, please read carefully the full Changelog before upgrading.

PHP 5.3.21

Sun, 27 Jan 2013 14:23:26 +0000

On january 17th 2013, the PHP group has released PHP 5.3.21 :

These releases fix about 10 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures, with these changes :

APC has been upgraded to 3.1.14
Xcache has been upgraded to 3.0.1 (now compatible with Ioncube)

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.11

Thu, 24 Jan 2013 22:25:29 +0000

On january 17th 2013, the PHP group has released PHP 5.4.11 :

These releases fix about 10 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures, with these changes :

APC has been upgraded to 3.1.14
Xcache has been upgraded to 3.0.1 (now compatible with Ioncube)
mysqlnd headers are now included in php5-dev to allow mysqlnd plugins to build

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Percona toolkit 2.1.8

Thu, 10 Jan 2013 22:34:41 +0000

Percona toolkit 2.1.8 is now available on Dotdeb for Debian 6.0 “Squeeze”. It includes some bug fixes and also beta support for MySQL 5.6 and Percona XtraDB Cluster. Take a look at this blog post by Tom Diederich for more info.

As usual, please read the list of changes for Percona toolkit 2.1.8 before upgrading.

Redis 2.6.8

Thu, 10 Jan 2013 22:15:47 +0000

Redis 2.6.8 has been packaged, bringing two changes (take a look at the Changelog) :

[BUGFIX] Multiple fixes for EVAL (issue #872).
[BUGFIX] Fix overflow in mstime() in redis-cli and benchmark.
[BUGFIX] Fix Linux / PPC64 behavior by correcting endianess detection.
[BUGFIX] Fix NetBSD build by defining _XOPEN_SOURCE appropriately.
[BUGFIX] Added missing license and copyright in a few places.
[BUGFIX] Better error reporting when fd event creation fails.

The upgrade urgency is moderate if you use Lua scripting. Otherwise low.

Zabbix is now available on Dotdeb

Mon, 31 Dec 2012 10:34:40 +0000

Let me introduce you Zabbix, a very nice all-in-one open source availability and performance monitoring solution that I use everyday on TextMe to ensure that all the applications and servers are going well. Below is a short list of features available in Zabbix:

auto-discovery of servers and network devices (great for autoscaled platforms)
low-level discovery (the killer feature of the 2.0 branch, imho)
distributed monitoring with centralized web administration
support for both polling and trapping mechanisms
server software for Linux, Solaris, HP-UX, AIX, FreeBSD, OpenBSD, OS X
native high performance agents (client software for Linux, Solaris, HP-UX, AIX, FreeBSD, OpenBSD, OS X, Tru64/OSF1, Windows NT4.0, Windows 2000, Windows 2003, Windows XP, Windows Vista)
agent-less monitoring
secure user authentication
flexible user permissions
web-based interface
flexible e-mail notification of predefined events
high-level (business) view of monitored resources
audit log…

PHP 5.4.10 and PHP 5.3.20

Sun, 30 Dec 2012 18:59:50 +0000

On december 20th 2012, the PHP group has released PHP 5.4.10 and PHP 5.3.20 :

These releases fix about 15 bugs. Please note that the PHP 5.3 series will enter an end of life cycle and receive only critical fixes as of March 2013. All users of PHP are encouraged to upgrade to PHP 5.4.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

MySQL 5.5.29

Mon, 24 Dec 2012 11:14:06 +0000

Packages of MySQL 5.5.29 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes some InnoDB- and replication-related issues and some more bugs.

Please note that the Pinba engine has also been rebuilt to be used with the new version.

As usual, please read carefully the full Changelog before upgrading.

Nginx 1.2.6

Wed, 12 Dec 2012 14:57:24 +0000

Dotdeb’s packages of Nginx 1.2.6 are now available for Debian 6.0 “Squeeze” (amd64/i386) with the following changes (see the Changelog) :

Feature: the $request_time and $msec variables can now be used not only in the " log_format" directive.
Bugfix: cache manager and cache loader processes might not be able to start if more than 512 listen sockets were used.
Bugfix: in the ngx_http_dav_module.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Redis 2.6.7

Tue, 04 Dec 2012 10:35:24 +0000

Redis 2.6.7 has been packaged, bringing two changes (take a look at the Changelog) :

[BUGFIX] Don’t crash if BLPOP & co are called with the same key repeated multiple times (issue #801).
[BUGFIX] Jemalloc updated to 3.2.0

The upgrade urgency is :

high if you experienced one or more crashes, or if you BLPOP using the same key multiple times,
moderate if Redis is running fine for you.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

PHP 5.4.9 and PHP 5.3.19

Mon, 26 Nov 2012 05:01:10 +0000

On november 22nd 2012, the PHP group has released PHP 5.4.9 and PHP 5.3.19, that bring ~15 bug fixes. The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Please also note that Xcache (packaged as php5-xcache) has been upgraded to its 3.0.0 version.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Redis 2.6.5

Sat, 24 Nov 2012 06:35:24 +0000

Redis 2.6.5 has been released, bringing a different behavior in MULTI/ EXEC handling of errors. According to the Changelog,

This was done because the new behavior is safer compared to the old one, and should not break any code targeting Redis 2.6 in a critical way..

Here are the other changes :

RDB/AOF children now log amount of additional memory used because of copy on write.
MIGRATE non critical fixes (see commits for details).
MULTI/ EXEC: now EXEC aborts on errors before EXEC.
Fix integer overflow in zunionInterGenericCommand resulting into Z[INTER|UNION][STORE] commands to crash under extremely unlikely conditions (almost impossible in real world).
EVALSHA is now case insensitive (and will not crash).
BSD license and copyright notice added to every .c and .h file.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Percona toolkit 2.1.7

Sat, 24 Nov 2012 06:27:03 +0000

Percona toolkit 2.1.7 is now available on Dotdeb for Debian 6.0 “Squeeze”. It includes some bug fixes and also :

a plugin interface for pt-stalk
a correct column renaming support for pt-online-schema-change
and enchanced compatibility of pt-table-checksum with Percona XtraDB Cluster

As usual, please read the list of changes for Percona toolkit 2.1.6 and 2.1.7 before upgrading.

Nginx 1.2.5, Passenger 3.0.18

Wed, 14 Nov 2012 18:19:07 +0000

Dotdeb’s packages of Nginx 1.2.5 are now available for Debian 6.0 “Squeeze” (amd64/i386).

On the Nginx side, it fixes some minor bugs and bring new minor features. Please take a look at Nginx’ official Changelog before upgrading.

On the Dotdeb side :

the Pinba module has been added to nginx-full, nginx-passenger and nginx-extras
the HTTP substitution filter module (v0.6.2-6aa992a2) has been added to nginx-full, nginx-passenger and nginx-extras
chunkin-nginx-module has been upgraded to 0.23rc2-3-e57a7ab9
headers-more-nginx-module has been upgraded to v0.18-179f39b1
nginx-development-kit has been upgraded to v0.2.17-7-f92d6c6a
nginx-echo has been upgraded to v0.41-b1e519fe
nginx-lua has been upgraded to v0.7.4-35d963f1
nginx-push-stream-module has been upgraded to v0.3.4-68651290
Passenger has been upgraded to the 3.0.18 version

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Redis 2.6.3

Wed, 07 Nov 2012 09:38:48 +0000

A new version of Redis, 2.6.3, has been released, bringing some minor fixes. Fore more information, take a look at the Changelog.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Redis 2.6.0

Thu, 25 Oct 2012 13:58:43 +0000

A new major version of Redis, 2.6.0, has been released on Oct 3rd, bringing Lua scripting and bitops. Fore more information, take a look at Antirez’ blog note.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

PHP 5.4.8 and PHP 5.3.18

Fri, 19 Oct 2012 10:52:12 +0000

On october 18th 2012, the PHP group has released PHP 5.4.8 and PHP 5.3.18, that bring ~20 bug fixes. The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Percona toolkit 2.1.5

Sun, 14 Oct 2012 12:14:10 +0000

Percona toolkit 2.1.5 is now available on Dotdeb for Debian 6.0 “Squeeze”. It includes only 3 bug fixes :

As usual, please read the list of changes before upgrading.

Percona toolkit 2.1.4

Thu, 04 Oct 2012 09:14:13 +0000

Percona toolkit 2.1.4 is now available on Dotdeb for Debian 6.0 “Squeeze”. It includes 26 bug fixes and three new features:

Making pt-table-checksum work with Percona XtraDB Cluster,
adding a --run-time option to pt-table-checksum,
and implementing the “Version Check” feature, enabled through the --version-check switch

As usual, please read the list of changes before upgrading.

MySQL 5.5.28

Sat, 29 Sep 2012 12:19:05 +0000

The packages of MySQL 5.5.28 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes some InnoDB-, partition- and replication-related issues.

The Pinba engine has also been rebuilt to be used with the new version.

As usual, please read carefully the full Changelog before upgrading.

Nginx 1.2.4

Wed, 26 Sep 2012 11:35:15 +0000

Dotdeb’s packages of Nginx 1.2.4 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix some minor bugs, please take a look at Nginx’ official Changelog before upgrading.

Please also note that Passenger has been upgraded to the 3.0.17 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

PHP 5.4.7 and PHP 5.3.17

Sun, 16 Sep 2012 07:31:03 +0000

On september 13th 2012, the PHP group has released PHP 5.4.7 and PHP 5.3.17, that bring ~20 bug fixes.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :

php5-suhosin is not a recommendation from php5-common anymore.
php5-xcache now includes the admin web interface files (closes #10).
php5-apc includes APC 3.1.13 for PHP 5.4, and has been rollbacked to APC 3.1.9 for PHP 5.3 for more stability.

About the PHP-FPM and APC issues, the packages include all that has been committed/released about the many bug reports on these subjects. I’m still watching any activity that would allow me to provide better packages.

How to post useful bug reports

Fri, 24 Aug 2012 20:15:26 +0000

With the latest two PHP updates, some users reported problems with FPM, with APC, etc… It was about segfaults, problematic init scripts, and so on… But all those comments couldn’t really help me to diagnose the problems in an efficient manner.

Here are the pieces of information that you have to provide to help me fixing your problem :

What is your distribution? (disclaimer : only Debian stable is supported)
What is your architecture? amd64 or i386?
Which exact PHP version are you using? 5.4.x or 5.3.x?
Which SAPI are you using? mod_php? CGI? FPM? Embed?
What’s the full content of your /etc/apt/sources.list and /etc/apt/sources.list.d files?
What is the result of dpkg -l 'php*' | grep '^.i' ?
Please provide a textual description of the bug (don’t hesitate to provide some code, the expected result…).
Please provide any modified configuration directive.
Please provide a backtrace, after installing php5-dbg.

Now, some tips to have a stable PHP stack :

PHP 5.4.6

Sun, 19 Aug 2012 11:03:46 +0000

On august 16th 2012, the PHP group has released PHP 5.4.6, that brings 20 minor bug fixes.

PHP 5.3.16

Sat, 18 Aug 2012 08:35:10 +0000

On august 16th 2012, the PHP group has released PHP 5.3.16, that brings 20 minor bug fixes.

Pinba engine 1.0.0

Fri, 17 Aug 2012 11:05:49 +0000

I already talked about Pinba, this great Application Performance Monitoring (APM) tool that is made of :

a MySQL storage engine ( pinba-mysql-5.5),
a PHP extension ( php5-pinba),
and even a python module, pynba, (thanks to my IsCool Entertainment friends) and an experimental Nginx module.

But since MySQL 5.1 support has been discontinued on Dotdeb, it was impossible to install the Pinba MySQL storage engine, just because it depended on a non-existant MySQL 5.1 version.

Percona toolkit 2.1.3

Sat, 11 Aug 2012 10:55:56 +0000

Percona toolkit 2.1.3 is now available on Dotdeb for Debian 6.0 “Squeeze”. It brings a lot of bug fixes. As usual, please read the list of changes before upgrading.

Nginx 1.2.3

Tue, 07 Aug 2012 16:23:37 +0000

Dotdeb’s packages of Nginx 1.2.3 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix 5 bugs, please take a look at Nginx’ official Changelog before upgrading.

Please also note that :

Naxsi has been upgraded to the 0.48 version, and the new nginx-naxsi-ui package provides the autolearning daemon and the web user interface.
Nginx Lua has been upgraded to the 0.5.8 version.
Passenger has been upgraded to the 3.0.14 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Passenger 3.0.14

Tue, 07 Aug 2012 16:10:39 +0000

Packages of Passenger 3.0.14 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Here is the announcement from Phusion’s blog :

Phusion Passenger is an Apache and Nginx module for deploying Ruby web applications. It has a strong focus on ease of use, stability and performance. Phusion Passenger is built on top of tried-and-true, battle-hardened Unix technologies, yet at the same time introduces innovations not found in most traditional Unix servers. Since version 3.0 it can also run standalone without an external web server, making it not only easier for first-time users but also ideal on development environments.

MySQL 5.5.27

Tue, 07 Aug 2012 14:30:40 +0000

The packages of MySQL 5.5.27 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes some InnoDB- and replication-related issues.

As usual, please read carefully the full Changelog before upgrading.

Redis 2.4.16

Thu, 02 Aug 2012 09:49:56 +0000

Redis 2.4.16 has been released. Here is the short Changelog :

INFO command now shows slaves with the correct port number, assuming you use 2.4.16 or greater as slave as well. This makes Redis 2.4.16 compatible with Redis Sentinel. This fix required the introduction of a new internal command called REPLCONF, see commit b998ebe for more information.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. The upgrade urgency is low.

PHP 5.4.5 and PHP 5.3.15

Mon, 23 Jul 2012 14:25:59 +0000

On july 19th 2012, the PHP group has released PHP 5.4.5 and PHP 5.3.15, that bring over 30 bug fixes, including a fix for a security related overflow issue in the stream implementation.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures (see the installation instructions). Please also note that the php5-xhprof package is now available for PHP 5.4.

Critical update : MySQL 5.5.25a

Tue, 10 Jul 2012 06:32:57 +0000

The packages of MySQL 5.5.25a are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes a very annoying bug on InnoDB : bug #65745, “UPDATE on InnoDB table enters recursion, eats all disk space”.

As usual, please read carefully the full Changelog before upgrading.

Nginx 1.2.2

Tue, 03 Jul 2012 16:20:24 +0000

Dotdeb’s packages of Nginx 1.2.2 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix 11 bugs, enhance IPv6, and introduce weighted ip_hash and least_conn load-balancing to upstream servers. Please take a look at Nginx’ official Changelog before upgrading.

Please also note that :

Naxsi has been upgraded to the 0.47 version, and the new nginx-naxsi-ui package provides the autolearning daemon and the web user interface.
Nginx Cache Purge has been upgraded to the 1.6 version.
Passenger has been upgraded to the 3.0.13 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Passenger 3.0.13

Tue, 03 Jul 2012 16:18:01 +0000

Packages of Passenger 3.0.13 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Here is the announcement from Phusion’s blog :

PHP 5.4.4

Fri, 22 Jun 2012 14:15:35 +0000

On june 14th 2012, the PHP group has released PHP 5.4.4, that brings over 30 bug fixes, some of which are security related : A weakness in the DES implementation of crypt and a heap overflow issue in the phar extension. Please also note that the use of php://fd streams is now restricted to the CLI SAPI ( php5-cli).

Packages of PHP 5.4.4 are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures (see the installation instructions).

Redis 2.4.15

Thu, 21 Jun 2012 17:59:47 +0000

Redis 2.4.15 has been released. Here is the short Changelog :

[BUGFIX] Jemalloc updated to 3.0.0. This fixes a possibly AOF rewrite issue. See issue #504 for info.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. The upgrade urgency is moderate if you use AOF, otherwise low.

PHP 5.3.14

Thu, 21 Jun 2012 05:21:26 +0000

On june 14th 2012, the PHP group has released PHP 5.3.14, that brings over 30 bug fixes, some of which are security related : A weakness in the DES implementation of crypt and a heap overflow issue in the phar extension. Please also note that the use of php://fd streams is now restricted to the CLI SAPI ( php5-cli).

Packages of PHP 5.3.14 are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

MySQL 5.1 discontinued on Dotdeb

Wed, 20 Jun 2012 18:20:08 +0000

During the last weeks, MySQL suffered from many vulnerabilities (see DSA-2429-1 and DSA-2496-1). Due to the non-disclosure of security patch information from Oracle, the Debian security team is now forced to ship upstreams version update of MySQL 5.1 (5.1.63 as of this writing).

Then it makes no sense for Dotdeb to duplicate this effort and to maintain the same versions of MySQL 5.1 for Squeeze with the same features and level of optimization. As a consequence the MySQL 5.1 packages has been removed from the Dotdeb repository (you’ll find archived versions here).

Percona toolkit 2.1.2

Wed, 20 Jun 2012 18:00:01 +0000

Percona toolkit 2.1.2 is now available on Dotdeb for Debian 6.0 “Squeeze”. It brings a lot of bug fixes :

pt-table-sync is now working properly, the --lock-and-rename feature has been disabled when using it with MySQL versions that don’t support it reliably.
pt-table-checksum and pt-online-schema-change have been enhanced to add even more safety checks, and to detect and deal with some MySQL optimizer misbehaviors, as well as to handle more edge-case behaviors related to things like replication lag.
A variety of bugfixes in pretty much every tool because of an expanded test coverage : more MySQL versions, more operating system platforms, more types of MySQL server settings, and more versions of Perl.

Baron Schwartz also wrote a blog post about it.

Nginx 1.2.1

Thu, 07 Jun 2012 15:32:07 +0000

Dotdeb’s packages of Nginx 1.2.1 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix some bugs and enhance the IPv6 support. Please take a look at Nginx’ official Changelog before upgrading.

Please also note that Naxsi has been upgraded to the 0.46-1 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

MySQL 5.5.25

Tue, 05 Jun 2012 22:50:52 +0000

The packages of MySQL 5.5.25 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes some InnoDB- and replication-related issues.

As usual, please read carefully the full Changelog before upgrading.

Redis 2.4.14

Wed, 23 May 2012 10:11:14 +0000

Redis 2.4.14 has been released to fix many non trivial bugs :

[BUGFIX] Fixed issue #518 (Redis 99% CPU when master down).
[BUGFIX] Fixed issue #516 ( ZINTERSTORE mixing sets and zsets).
[BUGFIX] Fixed a bug in install_server.sh when using chkconfig
[BUGFIX] Fixes to --test-memory implementation.
[BUGFIX] Allow PREFIX to be overridden in Makefile.
[BUGFIX] The test is now more reliable on slow computers.
redis-cli –pipe mode, see http://redis.io/topics/mass-insert
Much better expired keys collection algorithm that makes the server much more responsive when a lot of keys are expiring at the same time.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. The upgrade urgency is high.

Security : PHP 5.4.3 and PHP 5.3.13

Tue, 08 May 2012 22:52:22 +0000

PHP 5.4.3 and PHP 5.3.13 have been released by the PHP development team to fix some critical security issues :

Source code disclosure with a trivial request (CVE-2012-1823 and CVE-2012-2311) - PHP 5.4 and 5.3 are vulnerable
buffer overflow in apache_request_headers() (CVE-2012-2329) - only PHP 5.4 is vulnerable.

If you’re using the CGI flavor of PHP, upgrading is highly recommended. You can see more info on PHP’s website and on this useful blog post.

MySQL 5.5.24

Tue, 08 May 2012 15:09:50 +0000

The packages of MySQL 5.5.24 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. It fixes an undisclosed security issue (thanks Oracle) and some other bugs as well.

As usual, please read carefully the full Changelog before upgrading.

Note : the packages have been updated to include a missing init script. Sorry for the mess.

Security update : MySQL 5.1.62

Sat, 05 May 2012 11:03:05 +0000

MySQL 5.1.62 packages are now available for Debian 6.0 “Squeeze” on amd64 and i386 architectures.

This is a important security update that fixes unspecified vulnerabilities identified by Oracle in all versions of MySQL 5.1 earlier than 5.1.62. If you did not upgrade to MySQL 5.5, please consider upgrading your MySQL server (at least) to 5.1.62.

FYI, CVE list is as follows :

The corresponding Pinba storage engine has also been rebuilt.

Redis 2.4.13

Wed, 02 May 2012 10:54:23 +0000

Redis 2.4.13 has been released to fix a critical bug in KEYS command :

[BUGFIX] Fix for KEYS command: if the DB contains keys with expires the KEYS command may return the wrong output, having duplicated or missing keys. See issue #487 and #488 on github for details.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. Upgrading is strongly advised.

PHP 5.4.1

Mon, 30 Apr 2012 21:17:38 +0000

On april 26th 2012, the PHP group has released PHP 5.4.1 too, that brings over 60 bug fixes, some of which are security related :

Security Enhancements and Fixes in PHP 5.4.1:

Fixed bug #54374 (Insufficient validating of upload name leading to corrupted $_FILES indices). (CVE-2012-1172).

Add open_basedir checks to readline_write_history and readline_read_history.

Key enhancements in PHP 5.4.1 include:

Added debug info handler to DOM objects.

Fixed bug #61172 (Add Apache 2.4 support).

Packages of PHP 5.4.1 and of all its related extensions are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. Please note that :

PHP 5.3.11

Mon, 30 Apr 2012 11:57:34 +0000

On april 26th 2012, the PHP group has released PHP 5.3.11, that brings over 60 bug fixes, some of which are security related :

Security Enhancements and Fixes in PHP 5.3.11:

Fixed bug #54374 (Insufficient validating of upload name leading to corrupted $_FILES indices). (CVE-2012-1172).

Add open_basedir checks to readline_write_history and readline_read_history.

Fixed bug #61043 (Regression in magic_quotes_gpc fix for CVE-2012-0831).

Key enhancements in PHP 5.3.11 include:

Added debug info handler to DOM objects.

Fixed bug #61172 (Add Apache 2.4 support).

Packages of PHP 5.3.11 are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Redis 2.4.12

Mon, 30 Apr 2012 10:51:07 +0000

Redis 2.4.12 has been released with these changes :

[BUGFIX] Limit the amount of memory consumed by the slow log.
[BUGFIX] --test-memory option fixes.
[BUGFIX] Less false positives in tests.

The upgrade urgency is low if you don’t experience any of the fixed problems.

The packages of Redis 2.4.12 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Nginx 1.2.0 with Naxsi 0.45 and Passenger 3.0.12

Sun, 29 Apr 2012 16:59:10 +0000

Dotdeb’s packages of the long-awaited Nginx 1.2.0 are now available for Debian 6.0 “Squeeze” (amd64/i386) in five flavors : nginx-light, nginx-naxsi, nginx-full, nginx-passenger and nginx-extras.

This is a major release with a lot of improvements since the former 1.0 branch. Please take a look at Nginx’ official Changelog before upgrading.

On the Dotdeb side :

Naxsi, a high performance, low rules maintenance, Web Application Firewall module, has been upgraded to its 0.45 version. Please read its documentation fore more info.
Passenger has been upgraded to its 3.0.12 version.
Because nginx-passenger is now dedicated to Passenger, nginx-extras does not contain it anymore. Don’t forget to backup your configuration files when switching from nginx-extras to nginx-passenger.

If you want to know which module has been included in each Nginx flavor, you just have to look at this useful document.

Passenger 3.0.12

Sun, 29 Apr 2012 16:38:07 +0000

Packages of Passenger 3.0.12 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Here is the announcement from Phusion’s blog :

Redis 2.4.11

Thu, 19 Apr 2012 14:27:48 +0000

Redis 2.4.11 has been released with these changes :

[BUGFIX] Fixed a problem with aeWait() implementation. May cause a crash under non easy to replicate condiitons. See issue #267 on github.
[BUGFIX] SORT with GET/ BY option fetching expiring keys fixed. Issue #460.
[BUGFIX] INFO field master_link_down_since_seconds initialized correctly.
[FEATURE] redis-cli back ported from Redis unstable. Now has support for --bigkeys (to sample the DB for very large keys), --slave to simulate a slave instance.

The upgrade urgency is moderate if you don’t experience any of the fixed problems.

MySQL 5.5.23

Fri, 13 Apr 2012 21:48:33 +0000

The packages of MySQL 5.5.23 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with no major change except bug fixes.

As usual, please read carefully the full Changelog before upgrading.

Percona toolkit 2.1.1

Thu, 12 Apr 2012 20:41:23 +0000

Percona toolkit 2.1.1 is now available on Dotdeb for Debian 6.0 “Squeeze”. You’ll find its Changelog here.

2.1 introduces a lot of new code for:

pt-online-schema-change (completely redesigned)

pt-mysql-summary (completely redesigned)

pt-summary (completely redesigned)

pt-fingerprint (new tool)

pt-table-usage (new tool)

Baron Schwartz also wrote a blog post that presents pt-online-schema-change, a new and useful online schema change tool.

Security : Nginx 1.0.15

Thu, 12 Apr 2012 20:32:03 +0000

Nginx 1.0.15 packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fix a buffer overflow in the ngx_http_mp4_module :

Security: specially crafted mp4 file might allow to overwrite memory locations in a worker process if the ngx_http_mp4_module was used, potentially resulting in arbitrary code execution ( CVE-2012-2089). Thanks to Matthew Daley.
Bugfix: in the ngx_http_mp4_module.

Upgrading is recommended if you’re using the nginx-extras packages.

Nginx with 2 new flavors : Naxsi & Passenger

Tue, 03 Apr 2012 17:04:16 +0000

Dotdeb’s packages of Nginx 1.0.14 for Debian 6.0 “Squeeze” (amd64/i386) have been synchronized with Debian’s ones to benefit from the great work of Cyril Lavier.

As a consequence, two new flavors of Nginx are now available, in addition to the regular nginx-light, nginx-full and nginx-extras packages :

nginx-naxsi inherits from nginx-light with a great new feature : Naxsi, a high performance, low rules maintenance, Web Application Firewall module. Use it if you want to protect your web apps from malicious visitors. Please read its documentation fore more info.
nginx-passenger is dedicated to Passenger, the well-known Ruby on Rails runtime. Please also note that :
- the passenger-common package has been renamed to ruby-passenger to stick to the Debian naming convention,
- Passenger was already included in nginx-extras. To ease the migration (don’t forget to backup your configuration files), it will stay so until Nginx 1.2 is released.

Redis 2.4.10

Fri, 30 Mar 2012 11:39:29 +0000

Redis 2.4.10 has been released with these changes :

[FEATURE] Redis –test-meory improved with new test testing addressing.
[BUGFIX] Fixed a memory leak: happens when replication is used with DB > 9.
[BUGFIX] Fixed a replication bug that happens in chained replicaiton when a slave is attached to a master that is later turned into a slave. Now the chained slave reconnection is properly forced.

The upgrade urgency is high for users using replication with a DB identifier higher than 9, or chaining replication so that slaves are attached to other slaves. It’s low for all the other users.

MySQL 5.5.22

Tue, 27 Mar 2012 17:35:32 +0000

The packages of MySQL 5.5.22 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with no major change except bug fixes.

As usual, please read carefully the full Changelogs of MySQL 5.5.21 and MySQL 5.5.22 before upgrading.

Redis 2.4.9

Mon, 19 Mar 2012 13:38:25 +0000

Redis 2.4.9 has been released with these changes :

[FEATURE] Redis server is now able to test your memory for broken RAM. Usage: ./redis-server –test-memory.
[FEATURE] redis-benchmark backported from unstable. Pipelining, run selected tests, and a few more features.
[BUGFIX] utils/install_server.sh script now works on Redhat / Centos.
[BUGFIX] Minor fix to redis-cli (github issue #306).

The packages of Redis 2.4.9 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They now supports higher than 922 values of maxclients, thanks to @jbfavre.

Security : Nginx 1.0.14

Thu, 15 Mar 2012 16:21:19 +0000

Nginx 1.0.14 packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fix a potential memory disclosure :

Security: content of previously freed memory might be sent to a client if backend returned specially crafted response. Thanks to Matthew Daley.

Upgrading is strongly recommended.

Packages of PHP 5.4.0 have been updated

Tue, 13 Mar 2012 11:43:04 +0000

Now that PHP 5.4.0 packages have been published as preview, issues have to be fixed. That’s why these packages have been updated with the following changes :

gzopen64() has been wrongly introduced on the i386 architecture, instead of the regular gzopen(). It is now fixed.
PCRE functions did not support Unicode. That’s ok now.
APC has been packaged as php5-apc against its svn/trunk version. It should now work well. Still waiting for an official release.
Xdebug should appear very soon is now available in 2.2.0RC1 version.

Thanks for your useful reports.

Percona toolkit 2.0.4

Sun, 11 Mar 2012 10:41:20 +0000

Percona toolkit 2.0.4 is now available on Dotdeb for Debian 6.0 “Squeeze”. You’ll find its Changelog here and an announce by Baron Schwartz here.

Security update : MySQL 5.1.61

Thu, 08 Mar 2012 00:16:19 +0000

MySQL 5.1.61 packages are now available for Debian 6.0 “Squeeze” on amd64 and i386 architectures.

This is a very important security update that fixes unspecified vulnerabilities identified by Oracle in all versions of MySQL 5.1 earlier than 5.1.61. If you did not upgrade to MySQL 5.5, please consider upgrading your MySQL server (at least) to 5.1.61.

FYI, CVE list is as follows :

The corresponding Pinba storage engine has also been rebuilt.

Nginx 1.0.13

Tue, 06 Mar 2012 13:30:50 +0000

Nginx 1.0.13 packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Here are the changes on the Dotdeb side :

nginx-upload-module has been added to nginx-extras
nginx-auth-pam has been added to nginx-extras and nginx-full. Closes #5.
http_secure_link_module has been added to nginx-full. Closes #3.
file-aio is now supported by all nginx flavors
ngxensite/ ngxdissite scripts are available to enable/disable sites. Closes #4.

Please take a look at Nginx’ Changelog before upgrading.

PHP 5.4.0 preview packages

Thu, 01 Mar 2012 22:46:12 +0000

After many months of active development, PHP 5.4.0 is now generally available :

The PHP development team is proud to announce the immediate release of PHP 5.4.0. This release is a major improvement in the 5.x series, which includes a large number of new features and bug fixes. Some of the key new features include: traits, a shortened array syntax, a built-in webserver for testing purposes and more. PHP 5.4.0 significantly improves performance, memory footprint and fixes over 100 bugs. For users upgrading from PHP 5.3 there is a migration guide available here, detailing the changes between those releases and PHP 5.4.0. Further details about the PHP 5.4.0 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

Redis 2.4.8

Wed, 22 Feb 2012 14:21:19 +0000

Redis 2.4.8 has been released with these changes :

[BUGFIX] Make install now uses cp -f to avoid ’text file busy’ errors.
[BUGFIX] redis-check-aof is now large files safe also on 32 bit systems.
[BUGFIX] Issue #327 fixed: maxmemory and replication now work much better.
[BUGFIX] Now HINCRBY can detect overflows too. Fix for issue #330.
[BUGFIX] Fixed compilation with latest clang.
[BUGFIX] Fixed handling of empty sorted sets produced in RDB by very old Redis versions (1.2.x).

The upgrade urgency is moderate if you don’t experience any of the fixed problems.

Percona toolkit 2.0.3

Tue, 14 Feb 2012 22:13:04 +0000

A quick note to announce that Percona toolkit 2.0.3 is now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. You’ll find its Changelog here.

MySQL 5.5.20

Wed, 08 Feb 2012 23:19:22 +0000

The packages of MySQL 5.5.20 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures, with the following changes :

the mysql-common package should now work with MySQL 5.1 packages without any problem (unknown configuration variables in /etc/mysql/my.cnf have been commented out)
mysql-server-5.5 now supports Linux native asynchronous IO

As usual, please read the full Changelog carefully before upgrading.

Nginx 1.0.12

Tue, 07 Feb 2012 18:01:26 +0000

Nginx 1.0.12 packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Here are the changes on the Dotdeb side :

Add the Cache purge module in nginx-full and nginx-extras
Use " default_server" instead of " default" in sites-available/default

Please take a look at Nginx’ Changelog before upgrading.

Redis 2.4.7

Tue, 07 Feb 2012 18:00:00 +0000

Redis 2.4.7 has been released with these changes :

[BUGFIX] Fixed false positive in issue #141 regression test.
[BUGFIX] Slave should not expire keys when loading an RDB after a SYNC.
[BUGFIX] Don’t increment stats for key misses / hits when key is written.
[BUGFIX] sds.c library now don’t allocate more than 1MB ahead.
32 bit instances without a maxmemory set now get a default limit of 3.5GB with maxmemory-policy set to noeviction.
Better crash report on crash (containing current client and command arguments).

The packages of Redis 2.4.7 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Security update : PHP 5.3.10

Fri, 03 Feb 2012 01:25:52 +0000

A few hours ago, PHP 5.3.10 has been released by the PHP Group. It’s an important security update for PHP 5.3.9 users : Stefan Esser discovered a remotely exploitable bug, introduced with PHP 5.3.9’s max_input_vars directive (CVE-2012-0830). You really should upgrade as soon as possible.

Packages of PHP 5.3.10 are now available for :

both Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”,
both amd64 and i386 architectures.

(Lenny packages will be available on php53.dotdeb.org during two weeks before being migrated to archives.dotdeb.org because of the end of Lenny’s security support)

Advisory : buffer overflow in php5-suhosin

Tue, 24 Jan 2012 15:02:26 +0000

A few days ago, Stefan Esser discovered a buffer overflow in the “transparent cookie encryption stack” of the Suhosin extension. Here is the full advisory.

If you previously installed the php5-suhosin package, you should upgrade to its fixed new version (0.9.33) by running :

apt-get update
apt-get install --reinstall php5-suhosin

Percona toolkit 2.0.2

Fri, 13 Jan 2012 15:55:30 +0000

A few days ago, Percona has released a major version of their Percona toolkit (formerly named Maatkit), bringing a lot of improvements, especially on pt-table-checksum. Baron Schwartz wrote a post about it.

Percona toolkit 2.0.2 is now available on Dotdeb for :

both Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”
both amd64 and i386 architectures

Redis 2.4.6

Fri, 13 Jan 2012 11:02:27 +0000

Redis 2.4.6 has been released with these changes :

[BUGFIX] Fixed issue #141 part 1: Possible protocol desyncs when clients send wrong protocol is now fixed. (See issue 141 for more details)
[BUGFIX] Fixed issue #141 part 2: Connection of multiple slaves used to result from time to time into corrupted protocol send to slaves connected after the first one. (See issue 141 for more details)
[BUGFIX] Do not propagate DEBUG LOADAOF.
New INFO contains information such as ip/port/state for every conneced slave.
Show GCC version in INFO output.

The packages of Redis 2.4.6 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

PHP 5.3.9

Thu, 12 Jan 2012 17:50:15 +0000

On january 10th 2012, the PHP group has released PHP 5.3.9, that brings over 90 bug fixes, some of which are security related :

Security Enhancements and Fixes in PHP 5.3.9:

Added max_input_vars directive to prevent attacks based on hash collisions. (CVE-2011-4885)

Fixed bug #60150 (Integer overflow during the parsing of invalid exif header). (CVE-2011-4566)

Key enhancements in PHP 5.3.9 include:

Fixed bug #55475 (is_a() triggers autoloader, new optional 3rd argument to is_a and is_subclass_of).

Fixed bug #55609 (mysqlnd cannot be built shared)

Many changes to the FPM SAPI module

PHP 5.3.9 is now available on Dotdeb for :

Redis 2.4.5

Sun, 25 Dec 2011 10:48:58 +0000

Redis 2.4.5 has been released with these changes :

[BUGFIX] Fixed a ZUNIONSTORE/ZINTERSTORE bug that can cause a NaN to be inserted as a sorted set element score. This happens when one of the elements has +inf/-inf score and the weight used is 0.
[BUGFIX] Fixed memory leak in CLIENT INFO.
[BUGFIX] Fixed a non critical SORT bug (Issue 224).
[BUGFIX] Fixed a replication bug: now the timeout configuration is respected during the connection with the master.
–quiet option implemented in the Redis test.

The packages of Redis 2.4.5 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

MySQL 5.5.19

Mon, 19 Dec 2011 20:43:37 +0000

The packages of MySQL 5.5.19 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fix some annoying issues that Dotdeb users kindly reported :

the mysql-common package, in its 5.5.19+ version, “breaks” mysql-server-5.1 and mysql-client-5.1 (as APT means it - it won’t actually break your server into pieces). Freezing it will prevent any issue (the introduction of unknown configuration variables in their /etc/mysql/my.cnf, for example)
the MySQL client now uses the system’s readline library instead of the bundled editline wrapper
missing header files and libraries are now included in the appropriate packages

As usual, please read the full Changelog carefully before upgrading.

Nginx 1.0.11 : Passenger 3.0.11 and Push stream support

Mon, 19 Dec 2011 13:27:00 +0000

Nginx 1.0.11 packages are now available :

for both Debian 6.0 “Squeeze” and 5.0 “Lenny”
for both amd64 and i386 architectures

Here are the changes on the Dotdeb side :

nginx-extras now includes the Push stream module, instead of the bogus HTTP Push. Please review your configuration.
nginx-extras now uses Passenger 3.0.11

Please take a look at Nginx’ and Passenger’s Changelogs before upgrading.

No more Debian 5.0 "Lenny" support after february 2012

Wed, 07 Dec 2011 23:10:37 +0000

The Debian project has announced in a security advisory ( DSA-2360-1) that the security support for Debian GNU/Linux 5.0 “Lenny” will be terminated in february 2012 :

This is an advance notice that security support for Debian GNU/Linux 5.0
(code name "lenny") will be terminated in two months.

The Debian project released Debian GNU/Linux 6.0 alias "squeeze" on the
6th of February 2011. Users and distributors have been given a one-year
timeframe to upgrade their old installations to the current stable
release. Hence, the security support for the old release of 5.0 is going
to end on the 6th of February 2012 as previously announced.

Previously announced security updates for the old release will continue
to be available on security.debian.org.

FYI, Dotdeb will follow this decision and no new packages will be available for Debian 5.0 after february 2012. Don’t be sad, this will give me some free time to focus on PHP 5.4 packages and some more cool tools.

Redis 2.4.4

Tue, 29 Nov 2011 16:08:06 +0000

Redis 2.4.4 has been released with these changes :

[BUGFIX] jemalloc upgraded to version 2.2.5, previous versions had a potentially serious issue when allocating big memory areas, something that Redis actually does. However we never received bug reports that appear to be caused by jemalloc.
[BUGFIX] DISCARD now clears DIRTY_CAS flag in the client. Now the next transaction will not fail if the previous transaction used WATCH and the key was touched.
CLIENT LIST output modified to include the last command executed by clients.
Better bug report on crash.
Protocol errors are now logged for loglevel >= verbose.
Two new INFO fields related to AOF, that can be useful when investigating Redis issues.

The packages of Redis 2.4.4 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Redis 2.4.3

Tue, 22 Nov 2011 12:55:09 +0000

Redis 2.4.3 has been released yesterday with these changes :

redis-cli now supports ‘single quotes’ style strings.
It is possible to disable password auth with CONFIG SET.
Some section of redis.conf better documented.
Default timeout for client connections now is 0 (no timeout).
I/O buffer length modified for better performances with big payloads.
Fixed crash on SPARC due to improper alighment due to bad assumptions about data types size.
CLIENT LIST output improved, code refactored.
[BUGFIX] Max log message length set to 4k to avoid truncation in INFO output written in the log file after a crash.
[BUGFIX] Close client connection when the query buffer reaches 1GB and log informaiton about the offending client, instead of crashing the instance when the query buffer reaches 2GB (for sds.c string overflow). This is related to issue #141 (github issues) and should fix the effect of this rare bug related to replication, but the cause is still not perfectly clear.

The packages of Redis 2.4.3 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures

MySQL 5.5.18 is out

Sat, 19 Nov 2011 14:02:55 +0000

MySQL 5.5.18 has been released by Oracle yesterday. The packages for Debian 6.0 “Squeeze” are now available on Dotdeb for both amd64 and i386 architectures.

As usual, please read the full Changelog carefully before upgrading.

Please also note that Oracle now provides .deb packages on their download page. That’s a great thing, but they’ll have to be improved :

no repository is available to ease the future updates
they’re monolythic and do not separate libraries from headers or binaries, configuration from server or client.
they do not take care of the official Debian naming convention

Nginx 1.0.10

Tue, 15 Nov 2011 22:09:15 +0000

Nginx 1.0.10 has been released a few hours ago and is now available on Dotdeb for :

both Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”
both amd64 and i386 architectures

Here are the changes since the 1.0.9 release :

*) Bugfix: a segmentation fault might occur in a worker process if
 resolver got a big DNS response.
 Thanks to Ben Hawkes.

*) Bugfix: in cache key calculation if internal MD5 implementation was
 used; the bug had appeared in 1.0.4.

*) Bugfix: the module ngx_http_mp4_module sent incorrect
 "Content-Length" response header line if the "start" argument was
 used.
 Thanks to Piotr Sikora.

MySQL 5.5 is finally here!

Tue, 01 Nov 2011 09:15:53 +0000

Some months after MySQL 5.5 being released as GA, I’m proud to announce that MySQL 5.5.17 is now available on Dotdeb, for Debian 6.0 “Squeeze”, for both amd64 and i386 architectures.

Focusing on compatibility with previous and future official Debian packages of MySQL, Dotdeb’s ones are based on the great work provided by the official Debian maintainers. Many thanks to them! I really hope that MySQL 5.5 will be part of Debian Sid soon.

Nginx 1.0.9

Tue, 01 Nov 2011 08:43:45 +0000

Nginx 1.0.9 has just been released, bringing 12 bug fixes.

The packages are now available on Dotdeb :

for both Debian 6.0 “Squeeze” and 5.0 “Lenny”,
for both amd64 and i386 architectures.

Take a look at the full list of changes before upgrading.

Redis 2.4.2

Fri, 28 Oct 2011 11:28:02 +0000

Redis 2.4.2 has been released with some important fixes :

* [BUGFIX] Unix socket creation mask config directive fixed.
* [BUGFIX] Fixed a bug that forced Redis to continously rewrite the AOF file
 when a manual BGREWRITEAOF was issued during a BGSAVE was
 still in progress.
* [BUGFIX] Fixed a server crash resulting from bad handling of SLAVEOF NO ONE.
* [BUGFIX] Fixed a memory leak in redis-cli.
* Debian/Ubuntu Redis system-wide installation script added under /utils.

Packages are now available for Debian 6.0 “Squeeze” for both amd64 and i386 architectures.

Packages of Nginx 1.0.8 are available

Thu, 20 Oct 2011 16:41:20 +0000

A new stable version of Nginx, numbered 1.0.8, has been released two weeks ago. It brings bug fixes and a new mp4 module. Take a look at the full list of changes before upgrading.

Here are the changes on the Dotdeb side :

the Http Headers More module has been included in nginx-extras,
the Http Chunkin module has been included in nginx-extras,
nginx-light now supports the Http Stub Status module,
the HTTP Push module is still present in the nginx-extras package but it may be removed in future releases because of stability issues.

Nginx 1.0.8 is available :

Redis 2.4.1 is out!

Thu, 20 Oct 2011 15:38:41 +0000

A few days ago, Redis 2.4.0, then Redis 2.4.1, have been released with some important changes since the 2.2 branch :

a bunch of optimizations for both size and speed
improved RDB persistence
deprecated VM
no Redis cluster
no scripting

I’m proud to announce that packages of Redis 2.4.1 are now available on Dotdeb for Debian 6.0 “Squeeze” amd64/i386.

(You’ll find everything you want to know about Redis 2.4 on this blog post, by antirez. Please read it carefully before upgrading.)

Maatkit is now known as Percona Toolkit

Tue, 11 Oct 2011 09:42:45 +0000

Useful tool for any MySQL DBA, Maatkit is a collection a utilities that ease painful MySQL manipulations (archive tables, keep a slave in sync, analyse slow queries…).

Or should I say “Maatkit was…”. In fact, it’s now known as “Percona Toolkit” and it’s available on Dotdeb for both Debian 6.0 “Squeeze” and 5.0 “Lenny”.

Enjoy.

Nginx 1.0.6 updated : Passenger 3.0.9 and syslog support

Fri, 16 Sep 2011 14:33:13 +0000

Nginx 1.0.6 has been updated :

the nginx-full and nginx-extras packages now support syslog
nginx-extras now uses Passenger 3.0.9

Here are the changes in Passenger 3.0.9 :

[Nginx] Fixed a NULL pointer crash that occurs on HTTP/1.0 requests when the Host header isn’t given.
Fixed deprecation warnings on RubyGems >= 1.6.
Improved Union Station support stability.

Redis 2.2.13

Mon, 12 Sep 2011 15:20:20 +0000

Dotdeb packages of Redis for Debian 6.0 “Squeeze” have been updated to version 2.2.13. Here are the release notes.

Nginx packages updated to 1.0.6

Tue, 30 Aug 2011 19:58:55 +0000

Packages of Nginx 1.0.6 for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny” are now available in amd64 and i386 flavours.

This release brings faster cache loader, better https, lingering close compatibility and 9 bugfixes . Please take a look at the list of changes for more details.

Please note that :

the Passenger module has been updated to version 3.0.8.
the Secure Download module is deprecated. It has been removed from nginx-extras. Use the HttpSecureLink module instead.
the syslog patch is now under review. It could be included in future packages.

Phusion Passenger 3.0.8 released

Tue, 30 Aug 2011 19:42:20 +0000

Packages of Passenger 3.0.8 are now available for Debian Squeeze and Lenny on both amd64 and i386 architectures.

Here is the announcement from Phusion’s blog :

PHP 5.3.8 is available

Tue, 30 Aug 2011 14:03:23 +0000

On August 18th, the PHP Group released PHP 5.3.7 with many security enhancements and many bugfixes. Sadly, it suffered from an issue with the crypt() function , forcing the PHP Group to publish PHP 5.3.8 (that fixes a mysqlnd issue with SSL connections too).

I’m glad too announce that PHP 5.3.8 packages are now available on Dotdeb for both amd64 and i386 architectures :

for Debian 6.0 Squeeze : on the main Dotdeb repository
for Debian 5.0 “Lenny” : on php53.dotdeb.org

Ugrading to PHP 5.3.8 is strongly recommended, but please read the Changelog before.

Redis 2.2.12 is here

Wed, 27 Jul 2011 12:05:39 +0000

Dotdeb packages of Redis for Debian 6.0 “Squeeze” have been updated to version 2.2.12. This release brings the “Slowlog” features and some important changes. You should upgrade.

Here are the release notes.

MySQL 5.1.58 is available

Mon, 25 Jul 2011 17:38:41 +0000

MySQL 5.1.58 packages are now available on Dotdeb :

for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”
for the amd64 and i386 architectures

The corresponding Pinba storage engine has also been rebuilt (Squeeze only).

And, as usual, please read the Changelog of this maintainance release before upgrading.

Packages of Nginx 1.0.5 are available

Thu, 21 Jul 2011 21:37:24 +0000

Great news! Packages of Nginx 1.0.5 for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny” are now available in amd64 and i386 flavours.

This release brings a lot of bugfixes and performance improvements. Please take a look at the list of changes for more information.

Please note that two new modules have been added to the nginx-extras package :

Enjoy :)

Redis 2.2.11 is available

Thu, 21 Jul 2011 15:57:39 +0000

Dotdeb packages of Redis for Debian 6.0 “Squeeze” have been updated to version 2.2.11. Here are the release notes.

Redis 2.2.10 is out

Wed, 15 Jun 2011 09:29:26 +0000

Dotdeb packages of Redis for Debian 6.0 “Squeeze” have been updated to version 2.2.10. Here are the release notes.

Nginx packages updated to 1.0.2

Wed, 18 May 2011 13:24:50 +0000

After MySQL and Redis, it’s Nginx’ turn : version 1.0.2 has been released on May 10., bringing some minor changes and bugfixes.

Its packages are now available on Dotdeb for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny” in amd64 and i386 flavours.

Redis 2.2.7 is out

Wed, 18 May 2011 09:49:02 +0000

Dotdeb packages of Redis for Debian 6.0 “Squeeze” have been updated to version 2.2.7. Here are the release notes.

MySQL 5.1.57 is out

Tue, 17 May 2011 11:36:32 +0000

MySQL 5.1.57 packages are now available on Dotdeb :

for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”
for the amd64 and i386 architectures

The corresponding Pinba storage engine has also been rebuilt (Squeeze only).

And, as usual, please read the Changelog of this maintainance release before upgrading.

Nginx 1.0.1 is out

Sat, 07 May 2011 08:02:53 +0000

Nginx 1.0.1 has been released on May 3rd, bringing some changes and bugfixes.

It is now available on Dotdeb for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny” in amd64 and i386 flavours.

Please note that the nginx-extras package now supports Passenger. I hope Ruby on Rails users will enjoy.

Rails user? Dotdeb now supports Passenger

Sat, 07 May 2011 07:53:14 +0000

Let me introduce Passenger :

Phusion Passenger™ — a.k.a. mod_rails or mod_rack — makes deployment of Ruby web applications, such as those built on the revolutionary Ruby on Rails web framework, a breeze. It follows the usual Ruby on Rails conventions, such as “Don’t-Repeat-Yourself”.

Deployment is only a matter of uploading application files. No Ruby (on Rails)-specific server configuration required!

Supports both the industry standard Apache web server and the fast and lightweight Nginx web server.

Zero maintenance. No port management, server process monitoring or stale file cleanup required. Errors are automatically recovered whenever possible.

Designed for performance, stability and security. Phusion Passenger should never crash Apache even in case of crashing Rails applications.

Well-documented, for both system administrators and developers!

Nginx 1.0.0 is out!

Fri, 15 Apr 2011 06:23:18 +0000

Nginx 1.0.0 has been delared stable and has been released three days ago :

nginx development was started about 9 years ago. The first public version 0.1.0 has been released on October 4, 2004. Now W3Techs reports that 6.8% of the top 1 million sites on the web (according to Alexa) use nginx. And 46.9% of top Russian sites use nginx.

Netcraft reports similar 6.52% nginx share of the million busiest sites in April 2011.

PHP 5.3.6 is available

Sat, 09 Apr 2011 16:07:34 +0000

On March 17th, the PHP Group released PHP 5.3.6. This maintainance release, that focuses on security, is now available on Dotdeb for Debian 6.0 “Squeeze” in amd64 and i386 flavours.

The compatibility with the official Debian packages has been improved and you (especially the FPM users) should really take care of some important changes that I made :

the intl extension is now built in a separate package : php5-intl
the FPM binary is now /usr/sbin/php5-fpm (previously /usr/bin/php5-fpm)
the FPM configuration file is now /etc/php5/fpm/php-fpm.conf (previously /etc/php5/fpm/php5-fpm.conf)
the FPM pools have to be moved to /etc/php5/fpm/pool.d/ (previously /etc/php5/fpm/pools/)

As usual, please read the Changelog before upgrading.

Redis 2.2.4

Thu, 07 Apr 2011 02:14:51 +0000

Dotdeb packages of Redis for Debian 6.0 “Squeeze” have been updated to version 2.2.4, introducing a new OBJECT command. Here are the release notes.

The corresponding php5-redis package with OBJECT supports will be updated in the next few days (with the upcoming PHP 5.3.6 packages).

MySQL 5.1.56 available

Mon, 14 Mar 2011 08:40:01 +0000

MySQL 5.1.56 packages are now available on Dotdeb :

for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”
for the amd64 and i386 architectures

Of course, the corresponding Pinba storage engine has been rebuilt (Squeeze only). But take care to the plugin-load directive in your /etc/mysql/my.cnf file : MySQL does not support several plugin-load directives and always keep the last read. Then if you want, for example, use the Pinba storage engine while having the the InnoDB plugin loaded, you should uncomment the following line.

Nginx : now on Dotdeb!

Sat, 12 Mar 2011 18:36:16 +0000

Dotdeb has always wanted to help you to build robust and featureful LAMP stacks. As of Debian 6.0 “Squeeze”, some useful tools are now supported and actively maintained on Dotdeb :

PHP 5.3 and its new FPM flavour
the Xhprof, PHPredis and Pinba extensions
the Pinba MySQL storage engine
the Redis key-value store

It is now time for me to introduce the long-awaited Nginx…

Nginx is a lightweight, high-performance Web server that relies on an asynchronous event-driven approach to handle HTTP requests. It behaves well under heavy load, even better than Apache (threaded or forked). Nginx can work with PHP through FPM or FastCGI (respectively packaged as php5-fpm and php5-cgi).

Redis updated to version 2.2.2

Sun, 06 Mar 2011 13:23:01 +0000

Dotdeb packages of Redis for Debian 6.0 “Squeeze” have been updated to version 2.2.2.

Here are the release notes.

Redis : a must-have for your LAMP stack

Tue, 01 Mar 2011 16:33:49 +0000

Let me introduce Redis…

Redis is an open source, advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets.

You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set.

In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log.

Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth.

Other features include a simple check-and-set mechanism, pub/sub and configuration settings to make Redis behave like a cache.

You can use Redis from most programming languages out there.

Redis is written in ANSI C and works in most POSIX systems like Linux, *BSD, OS X and Solaris without external dependencies. There is no official support for Windows builds, although you may have some options.

MySQL 5.1.55 is available

Tue, 22 Feb 2011 14:39:59 +0000

MySQL 5.1.55 packages are now available on Dotdeb :

for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”
for the amd64 and i386 architectures

As usual, please read the Changelog of this maintainance release before upgrading.

Note 1 : the Pinba storage engine for MySQL has been rebuilt against MySQL 5.1.55 (Squeeze only) Note 2 : Maatkit has been updated to 7284 Note 3 : if you had issues with loading the InnoDB plugin on Squeeze, your feedback is welcome (post a comment below).

Debian 6.0 "Squeeze" has been released

Sun, 06 Feb 2011 18:24:48 +0000

Today is a great day for the Debian community : Debian Squeeze has been released.

After 24 months of constant development, the Debian Project is proud to present its new stable version 6.0 (code name Squeeze). Debian 6.0 is a free operating system, coming for the first time in two flavours. Alongside Debian GNU/Linux, Debian GNU/kFreeBSD is introduced with this version as a technology preview.

The website of the Debian project also got a facelift. Please visit it for more information.

Let's monitor your PHP applications with Pinba

Mon, 31 Jan 2011 09:20:23 +0000

Do you know Pinba? It’s a great tool and you really should use it on your LAMP platform.

Pinba is a realtime monitoring/statistics server for PHP using MySQL as a read-only interface.

It accumulates and processes data sent over UDP by multiple PHP processes and displays statistics in a nice human-readable form of simple " reports", also providing read-only interface to the raw data in order to make possible generation of more sophisticated reports and stats.

With Pinba extension users also can measure particular parts of the code using timers with arbitrary tags.

Pinba is not a debugging tool in a common sense, since you’re not supposed to do debugging on production servers, but its main goal is to help developers to monitor performance of PHP scripts, locate bottlenecks in realtime and direct developers’ attention to the code that really needs it.

PHP 5.3.5, now for Squeeze

Tue, 11 Jan 2011 14:41:47 +0000

I just released PHP 5.3.5 packages for Debian 6.0 (a.k.a “Squeeze”), with some changes against the Lenny’s ones :

the packaging process has been improved : dependencies were cleaned up, PHP tests are now displayed, libtool 2.2 is now supported (thanks to the Debian team for their precious work)
3 new useful extensions have been packaged : gearman, phpredis and xhprof (without its interface files)

With these new packages, Dotdeb’s support for Squeeze is still experimental, but almost complete. Some more packages could be added in a near future :

You really should upgrade to PHP 5.3.5 or 5.2.17

Fri, 07 Jan 2011 10:53:42 +0000

A few days after releasing PHP 5.3.4 and PHP 5.2.16, the PHP group announced an important security update with PHP 5.3.5 and PHP 5.2.17 :

This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers.

The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from the command line.

All users of PHP are strongly advised to update to these versions immediately.

PHP 5.3.4 is available

Mon, 03 Jan 2011 21:10:19 +0000

After PHP 5.3.4 has been released by the PHP Group and after the corresponding Suhosin patch has been published by Stefan Esser, the PHP 5.3.4 packages for Debian “Lenny” 5.0 are now available on Dotdeb. Thanks for your patience.

Follow these instructions if you’re installing them for the first time. And as usual, please read the full announcement and the Changelog before upgrading.

Happy new year!

PHP 5.2 last update : 5.2.16

Mon, 03 Jan 2011 19:14:22 +0000

PHP 5.2.16 has been released by the PHP Group a few days after PHP 5.2.15 (fixing an open_basedir issue). It is now available on Dotdeb for your Debian “Lenny” servers.

This maintainance release marks the end of support for PHP 5.2. You are strongly encouraged to upgrade to PHP 5.3 (read this migration guide).

Please read PHP 5.2.15 and 5.2.16 release announcements and the full Changelog before upgrading.

MySQL 5.1.54 is available

Sat, 18 Dec 2010 09:03:43 +0000

MySQL 5.1.54 packages are now available on Dotdeb in amd64/i386 flavours for Lenny and Squeeze.

As usual, please read the Changelog of this maintainance release before upgrading.

Now, about MySQL 5.5 (I was asked on Twitter or in the comments here), it will be available on Dotdeb as soon as it is in Debian Sid or experimental. Please be patient. If you don’t need some 5.5 specific features, such as semi-sync replication, and if you just need to boost your InnoDB performances, you really should take a look at your /etc/mysql/my.cnf file and enable the InnoDB plugin.

Packages of MySQL 5.1.53 are available for Lenny... and Squeeze!

Sun, 05 Dec 2010 22:50:38 +0000

MySQL 5.1.53 packages for Debian 5.0 « Lenny » are now available on Dotdeb in amd64/i386 flavours. Please note that they’re available as preview for Squeeze too.

This maintainance release fixes many bugs and security issues. Upgrading is strongly recommended after having read the Changelogs here and here.

PHP 5.3.3 packages get a minor update

Fri, 08 Oct 2010 09:06:23 +0000

The PHP 5.3.3 packages for Debian 5.0 “Lenny” (amd64/i386) have been updated. Here are the changes :

php5-fpm should now work out-of-the-box. Some unset parameters prevented its launch. Thanks to Daniel Hahler for the patch.
PECL/APC has been upgraded to 3.1.4
PECL/memcache has been upgraded to 3.0.5

Upgrade to MySQL 5.1.51! It fixes a DoS vulnerability

Tue, 05 Oct 2010 21:14:32 +0000

MySQL versions prior to 5.1.51 (including 5.1.50) suffer from a vulnerability in the processing of arguments passed to the LEAST() or GREATEST() functions. This issue could be exploited by a malicious user to cause a server crash, leading to a DoS condition.

You really should upgrade your Lenny servers (amd64 or i386) with the new packages of MySQL 5.1.51 from Dotdeb. As usual, don’t forget to read the Changelog before upgrading.

MySQL DBA, Maatkit is good for you!

Wed, 29 Sep 2010 12:17:51 +0000

Maatkit is one of the great Open Source tools (among Percona Server, Xtrabackup and so on…) published by Percona. It’s a collection of utilities that help MySQL DBAs in many redundant, complex or boring tasks. For example :

mk-query-digest that outputs a digest of the queries from a slow-query logfile or from a running MySQL server,
mk-slave-delay that could help you to keep a copy of your databases while rolling back a new version of your application,
mk-parallel-dump and mk-parallel-restore to speed up your dump/load processes,
mk-table-checksum that checks the consistency of your MySQL slave,
…

If you’re a MySQL DBA that runs Debian servers, you really should install the new Maatkit packages from Dotdeb and read its documentation. There is a tool that will help you on your daily usage of MySQL, for sure!

MySQL 5.1.50 is here

Mon, 20 Sep 2010 07:47:37 +0000

Yesterday, many announcements have been made on MySQL Sunday. MySQL 5.5 is now RC, and will be GA soon, with many (exciting) improvements.

No, there are no MySQL 5.5 packages on Dotdeb (yet), but MySQL 5.1.50 packages for Debian 5.0 « Lenny » are now available on Dotdeb in amd64/i386 flavours.

This bugfix release embeds the InnoDB plugin 1.0.11.

As usual, please read the Changelog carefully before upgrading.

MySQL upgraded to 5.1.49

Mon, 02 Aug 2010 15:59:40 +0000

MySQL 5.1.49 packages for Debian 5.0 « Lenny » are now available on Dotdeb in amd64/i386 flavours.

This is a bug fix release, embedding the InnoDB plugin 1.0.10.

As usual, please read the Changelog carefully before upgrading.

PHP 5.2.14 is available too

Sun, 25 Jul 2010 13:11:24 +0000

On july, 22nd, the PHP Group released PHP 5.2.14 :

The PHP development team would like to announce the immediate availability of PHP 5.2.14. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related.

This release marks the end of the active support for PHP 5.2. Following this release the PHP 5.2 series will receive no further active bug maintenance. Security fixes for PHP 5.2 might be published on a case by cases basis. All users of PHP 5.2 are encouraged to upgrade to PHP 5.3.

PHP 5.3.3 packages are available

Sun, 25 Jul 2010 11:03:09 +0000

On july, 22nd, the PHP Group released PHP 5.3.3 :

The PHP development team would like to announce the immediate availability of PHP 5.3.3. This release focuses on improving the stability and security of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users are encouraged to upgrade to this release.

The packages for Debian “Lenny” are now available on Dotdeb on the usual repository.

Dotdeb packages are now signed!

Sun, 11 Jul 2010 15:35:51 +0000

After many requests from several users and after many months of promise, the Dotdeb repositories are GPG-signed. Yes, you can now get rid of the annoying " WARNING: The following packages cannot be authenticated!" message!

Waiting for a dotdeb-keyring package, you just have to get the key and add it to your trusted keys’ keyring :

gpg --keyserver keys.gnupg.net --recv-key 89DF5277
gpg -a --export 89DF5277 | sudo apt-key add -

I hope you’ll enjoy it.

MySQL 5.1.48 packages for Debian are here

Tue, 22 Jun 2010 19:45:20 +0000

MySQL 5.1.48 packages for Debian 5.0 « Lenny » are now available on Dotdeb in amd64/i386 flavours.

This is a bug fix release, focused on replication and partitioning, and the InnoDB plugin has been updated to the 1.0.9 stable version.

As usual, please read the Changelog carefully before upgrading.

MySQL 5.1.47, a security-focused release, is available

Tue, 25 May 2010 16:38:01 +0000

MySQL 5.1.47 is now available on Dotdeb for your Lenny servers, in amd64 and i386 flavours.

This is a security-oriented release that fixes some serious flaws… Please read full changelog for more information.

Please also note that the InnoDB plugin has been upgraded to version 1.0.8 and is now considered of General Availability quality. Feel free to use it for a performance boost.

MySQL 5.1.46 is now available

Fri, 14 May 2010 15:27:13 +0000

MySQL 5.1.46 is now available on Dotdeb for your Lenny servers, in amd64 and i386 flavours. It fixes a lot of annoying bugs and upgrades the InnoDB plugin to version 1.0.7 for more performances.

Be careful : the MySQL server is now split in two separate packages :

mysql-server-core-5.1 that contains only the mysqld binary and some system files,
mysql-server-5.1 that depends on mysql-server-core-5.1 and that contains the init scripts and utilities to run the MySQL server in a Debian environment.

The migration to this new packaging schema is transparent and will not break any dependencies.

May is the month of PHP security

Tue, 04 May 2010 12:26:21 +0000

According to Stefan Esser, author of the Suhosin patch, May 2010 will be the “Month of PHP Security” :

This initiative continues the effort of Hardened-PHP’s Month of PHP Bugs in 2007 to improve the security of PHP and the PHP ecosystem by disclosing vulnerabilities in PHP and PHP applications on the one hand and on the other hand by publishing articles and tools that help PHP application developers to develop more secure PHP applications.

PHP 5.3.2 and PHP 5.2.13 get an update

Wed, 21 Apr 2010 09:38:58 +0000

New packages of PHP 5.3.1 and PHP 5.2.13 has been uploaded to fix some annoying bugs :

filter_var now validates correctly the hostnames that include ‘-’ ( bug #51192)
the GD bundled library has been patched to fix some TrueType issues ( bug #51207, …)

In addition, PHP 5.3.2 now restarts softly, without any problem (thanks to Daniel Hahler).

MySQL 5.1.45 is available

Mon, 19 Apr 2010 20:27:36 +0000

Sorry, but I forgot to write a note about it. Here’s a quick one…

MySQL 5.1.45 is now available on Dotdeb for Debian 5.0 “Lenny” in amd64/i386 flavours.

This is a bug fix release, but please read the Changelog carefully before upgrading.

PHP 5.3.2 is available too!

Mon, 08 Mar 2010 22:29:56 +0000

A few days ago, the PHP Group released PHP 5.3.2. It fixes severe security issues and some other bugs :

The PHP development team is proud to announce the immediate release of PHP 5.3.2. This is a maintenance release in the 5.3 series, which includes a large number of bug fixes.

Security Enhancements and Fixes in PHP 5.3.2:

Improved LCG entropy. (Rasmus, Samy Kamkar)

Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)

Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

(…)

PHP 5.2.13 is available

Sun, 07 Mar 2010 12:21:41 +0000

A few days ago, the PHP Group released PHP 5.2.13. It fixes severe security issues and some other bugs :

The PHP development team would like to announce the immediate availability of PHP 5.2.13. This release focuses on improving the stability of the PHP 5.2.x branch with over 40 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.2.13:

Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)

Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

Improved LCG entropy. (Rasmus, Samy Kamkar)

(…)

MySQL 5.1.44 is available for Debian 5.0 "Lenny"

Sun, 21 Feb 2010 00:16:09 +0000

MySQL 5.1.44 is now available on Dotdeb for Debian 5.0 “Lenny” in amd64/i386 flavours.

This is primarily a bug fix release, but please read the Changelog carefully before upgrading.

MySQL 5.1.43 is available for Debian "Lenny" (and "Etch"...)

Thu, 04 Feb 2010 15:56:55 +0000

MySQL 5.1.43 is now available on Dotdeb for Debian 5.0 “Lenny” / Debian 4.0 “Etch” in amd64/i386 flavours.

Please note that it’s the last update for Etch, because the security supports ends for this branch (time to upgrade!).

This maintenance release comes with many improvements and bugfixes, especially the InnoDB plugin 1.0.6 (please read the Changelog for more details).

Etch security support discontinued by Debian on Feb. 15th...

Wed, 20 Jan 2010 21:33:02 +0000

The Debian security team announced that Debian 4.0 “Etch” security support will be ended on February 15th, 2010 :

Security Support for Debian GNU/Linux 4.0 to be discontinued on
February 15th

One year after the release of Debian GNU/Linux 5.0 alias 'lenny' and
nearly three years after the release of Debian GNU/Linux 4.0 alias
'etch' the security support for the old distribution (4.0 alias
'etch') is coming to an end next month. The Debian project is proud
to be able to support its old distribution for such a long time and
even for one year after a new version has been released.

The Debian project has released Debian GNU/Linux 5.0 alias 'lenny' on
the 14th of February 2009. Users and Distributors have been given a
one-year timeframe to upgrade their old installations to the current
stable release. Hence, the security support for the old release of
4.0 is going to end in February 2010 as previously announced.

Previously announced security updates for the old release will continue
to be available on security.debian.org.

Then, Dotdeb will follow the Debian project and all the Etch packages will be moved to http://archives.dotdeb.org/ on Feb. 15th.

MySQL 5.1.41 has been updated to fix a security issue

Wed, 20 Jan 2010 20:25:13 +0000

I just uploaded new MySQL 5.1.41 packages that fix a remote buffer overflow in MySQL servers that use the embedded YaSSL library :

Lenz Grimmer gives more information about this issue
CVE-2009-4484 has been filled

Since Debian and Dotdeb are impacted, you are strongly encouraged to upgrade your servers.

Dotdeb interviewed by PHP TV

Wed, 20 Jan 2010 08:46:55 +0000

Just for fun : I’ve been interviewed about Dotdeb by PHP TV, a french-speaking webTV.

PHP 5.2.12 packages are here!

Mon, 11 Jan 2010 21:49:56 +0000

On December 17th 2009, the PHP Group released PHP 5.2.12 :

The PHP development team would like to announce the immediate availability of PHP 5.2.12. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.2.12:

Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus)

Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)

Added “max_file_uploads” INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia)

Added protection for $_SESSION from interrupt corruption and improved “session.save_path” check, identified by Stefan Esser. (CVE-2009-4143, Stas)

Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)

(Please read the full announcement for more details)

The PHP 5.3.1 packages have been updated

Sun, 06 Dec 2009 10:14:09 +0000

The PHP 5.3.1 packages for Debian “Lenny” have been updated to fix :

the php5-fpm binary
the /etc/init.d/php5-fpm script

All should work fine now.

PHP 5.3.1 packages for Debian "Lenny" : they're here!

Mon, 30 Nov 2009 08:58:33 +0000

The official announcement

A few days ago, the PHP Group released PHP 5.3.1 :

The PHP development team would like to announce the immediate availability of PHP 5.3.1. This release focuses on improving the stability of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users of PHP are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.3.1:

Added “max_file_uploads” INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion.

Added missing sanity checks around exif processing.

Fixed a safe_mode bypass in tempnam().

Fixed a open_basedir bypass in posix_mkfifo().

Fixed failing safe_mode_include_dir.

Further details about the PHP 5.3.1 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

MySQL 5.1.41 is available for Debian "Lenny" and "Etch"

Fri, 27 Nov 2009 15:34:34 +0000

MySQL 5.1.41 is now available on Dotdeb for Debian 5.0 “Lenny” / Debian 4.0 “Etch” in amd64/i386 flavours.

This maintenance release fixes a lot of bugs (please read the Changelog for more details). Please note the the InnoDB plugin has been updated to 1.0.5.

MySQL 5.1.40 is available for Debian "Lenny" and "Etch" with InnoDB-plugin support

Mon, 02 Nov 2009 07:30:49 +0000

MySQL 5.1.40 is now available on Dotdeb for Debian 5.0 “Lenny” / Debian 4.0 “Etch” in amd64/i386 flavours.

As usual, this maintenance release fixes a lot of bugs (please read the Changelog for more details).

Please note that the packaging is a little bit different from the official Debian packaging, to include the InnoDB plugin in the mysql-server-5.1 package instead of in the libmysqlclient-dev one. This plugin replaces the built-in InnoDB support and has many advantages :

Google Perftools 1.4 are available for Debian 5.0 "Lenny"

Sat, 03 Oct 2009 10:55:21 +0000

Looking for a new way to speed up your MySQL server? The tcmalloc library from Google Perftools could be the answer (about 15-20% performance improvement). Refer to this (updated) How-to for more information.

I just packaged Google Perftools 1.4 for Debian 5.0 (a.k.a. “Lenny”). According to the Changelog, they’re bringing a lot of bugfixes and improvements, and then they enhance the stability of the daemons they’re plugged in, especially on 64bits systems.

MySQL 5.1.39 released for Debian "Etch" and "Lenny"

Thu, 01 Oct 2009 08:38:41 +0000

MySQL 5.1.39 is now available on Dotdeb for Debian 4.0 “Etch” / Debian 5.0 “Lenny” in amd64/i386 flavours.

This maintenance release fixes a lot of bugs. Please note that the Lenny version introduces some hardening features.

As usual, please read the list of changes in 5.1.39 before upgrading.

PHP 5.2.11 packages are available for Etch and Lenny

Wed, 23 Sep 2009 15:17:42 +0000

PHP 5.2.11 has been published a few days ago by the PHP Group and its packages are now available for Debian Etch and Lenny, amd64 and i386. It fixes a lot of bugs and some security issues :

Fixed certificate validation inside php_openssl_apply_verification_policy. (Ryan Sleevi, Ilia)
Fixed sanity check for the color index in imagecolortransparent(). (Pierre)
Added missing sanity checks around exif processing. (Ilia)
Fixed bug #44683 (popen crashes when an invalid mode is passed). (Pierre)

To avoid the same negative feedbacks as about PHP 5.2.10, a lot of debug and changes has been made :

MySQL 5.1.37 is available for Debian “Etch” and “Lenny”

Sat, 08 Aug 2009 08:08:18 +0000

MySQL 5.1.37 is now available on Dotdeb for Debian 4.0 “Etch” / Debian 5.0 “Lenny” in amd64/i386 flavours.

It fixes two security issues and brings a lot of bugfixes (read the list of changes), especially about replication and partitioning.

Please upgrade your servers.

MySQL 5.0.84 for Debian 4.0 "Etch", remote DoS under review

Mon, 27 Jul 2009 16:16:54 +0000

Some days after MySQL 5.0.83 has been released, MySQL 5.0.84 is now available on Dotdeb for Etch amd64/i386.

Please note that an advisory about a remote DoS for MySQL <5.0.84 is under review : CVE-2009-2446. Therefore, upgrading to this new version is strongly recommanded.

As usual, please read the list of changes before upgrading.

Dotdeb on Twitter

Mon, 27 Jul 2009 09:04:09 +0000

Dotdeb has now its own Twitter account. Feel free to follow…

MySQL 5.1.36 is available for Debian "Etch" and "Lenny"

Thu, 23 Jul 2009 14:30:23 +0000

MySQL 5.1.36 is now available on Dotdeb for Debian 4.0 “Etch” / Debian 5.0 “Lenny” in amd64/i386 flavours.

It fixes a lot of annoying bugs (read the list of changes to be convicted), especially one about granting the right privileges during the Debian post-installation process. The mysql-server-5.1 package should now install without needing any ugly trick.

Please upgrade your servers.

MySQL 5.0.83 for Debian 4.0 "Etch"

Thu, 23 Jul 2009 14:21:55 +0000

MySQL 5.0.83 is now available on Dotdeb for Etch amd64/i386.

Please read the list of changes of this maintenance release before upgrading.

PHP 5.3.0-final preview packages available for Debian Lenny

Fri, 03 Jul 2009 16:31:11 +0000

The official announce of PHP 5.3.0

Read carefully this announce from PHP.net and its links :

The PHP development team is proud to announce the immediate release of PHP 5.3.0. This release is a major improvement in the 5.X series, which includes a large number of new features and bug fixes.

Some of the key new features include: namespaces, late static binding, closures, optional garbage collection for cyclic references, new extensions (like ext/phar, ext/intl and ext/fileinfo), over 140 bug fixes and much more.

For users upgrading from PHP 5.2 there is a migration guide available here, detailing the changes between those releases and PHP 5.3.0.

Further details about the PHP 5.3.0 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

PHP 5.2.10 packages for Lenny/Etch are now available!

Thu, 25 Jun 2009 04:50:59 +0000

A few days ago, the PHP development team announced the availability of PHP 5.2.10 with many improvements and 100+ bug fixes. Here is the Changelog.

Now that the corresponding Suhosin patch is alive, the PHP 5.2.10 packages are available on Dotdeb :

for Debian Lenny and Etch
for the amd64 and i386 architectures

Upgrading your servers is highly recommanded.

Update : The PHP 5.2.10 packages seem to be buggy under (un)certain conditions : (f)CGI + Suhosin. Then I decided to rollback to 5.2.9 to avoid a flood a users’ requests and to give me time to investigate. If your PHP 5.2.10 does not encounter problems, keep it, you’re lucky

PHP 5.3.0 RC4 available

Mon, 22 Jun 2009 14:32:26 +0000

From PHP.net :

The PHP development team is proud to announce the fourth release candidate of PHP 5.3.0 (PHP 5.3.0RC4). This RC focuses on bug fixes and stability improvements, and we hope only minimal changes are required for the next candidate or final stable releases. PHP 5.3.0 is a newly developed version of PHP featuring long-awaited features like namespaces, late static binding, closures and much more.

Please download and test these release candidates, and report any issues found. A stable release is expected next week . In case of critical issues we will continue producing weekly RCs. Downloads and further information is available at qa.php.net. See also the work in progress 5.3 upgrade guide.

Google Perftools 1.3 available for Lenny

Tue, 16 Jun 2009 21:28:43 +0000

Do you remember how to speed up your MySQL server using the Google Perftools? It seems that the amd64 flavour of these libraries makes MySQL crash.

I just bumped the version of the google-perftools packages for Lenny from 1.0 to 1.3. According to the Changelog they’re bringing a lot of bugfixes and improvements, and then enhance the stability of the daemons they’re plugged in.

PHP 5.3.0 RC3 packages for Lenny

Tue, 16 Jun 2009 20:05:20 +0000

The third (and probably the last) release candidate of PHP 5.3.0 has been published by the PHP Group a few days ago. Then I updated the preview packages for Debian GNU/Linux 5.0 “Lenny” on amd64 and i386.

To fetch them, just add these temporary entries in your /etc/apt/sources.list and upgrade your boxes :

deb http://php53.dotdeb.org stable all deb-src http://php53.dotdeb.org stable all

Please note that an upgrade guide is being written. You also may want to visit this page.

PHP 5.3.0 RC2 packages for Lenny

Wed, 13 May 2009 13:45:07 +0000

A few days ago, the second release candidate of PHP 5.3.0 has been published by the PHP Group.

I just updated the preview packages for Debian GNU/Linux 5.0 “Lenny” on amd64 and i386. Have fun!

MySQL 5.0.81 is now available (for Etch only)

Wed, 06 May 2009 14:54:32 +0000

On May 1st, MySQL 5.0.81 has been published with a lot of bugfixes.

If you’re still using Etch, the corresponding packages are now available for i386 and amd64.

What to expect from MySQL 5.4?

Wed, 22 Apr 2009 23:45:45 +0000

MySQL 5.4 has been announced at the opening session of MySQL Conference 2009 and a preview is available for download. This release may look as a compromise between the current 5.1 and the major 6.0 branches, but it includes many (IMHO needed) improvements :

Sub-query optimizations
A new query algorythms
Replication killer features : replication heartbeat and semi-synchronous replication!
Google SMP patch (even for Solaris x86 and Sparc) and IO patches
Update of many antiquated defaults in the MySQL Server (like replication-related –master-host and so on…)
InnoDB improvements (such as scalability up to 16way x86 and up to 64way CMT servers)
A couple of performance fixes backported from 6.0
Dtrace integration on supported OSes

The results? 59% faster than 5.1, 40% improvement in read/write test, 71% throughput increase!

Built from the Valley, MySQL 5.1.34 is available

Tue, 21 Apr 2009 23:38:43 +0000

Blogging and building live from MySQL Conf 09… If you want more details about what happens here (technical sessions, MySQL 5.4, InnoDB improvements, MySQL Cluster, Sun/Oracle fusion…) or want to enjoy a drink in the Valley, please let me know…

[caption id=“attachment_214” align=“aligncenter” width=“500” caption=“credits : Duncan Davidson”] [/caption]

Back to the Dotdeb business : MySQL 5.1.34 has been published with its lot of bugfixes. It is now built and available on Dotdeb for your Lenny/Etch amd64/i386 Debian servers. No change in the packaging, just apt-get upgrade…

Minor update of the PHP 5.2.9 packages

Thu, 09 Apr 2009 17:14:43 +0000

The PHP 5.2.9 packages for Etch/Lenny amd64/i386 have been updated :

some obsolete ./configure options have been deleted
the sigchild support has been dropped
a memory leak has been fixed

PHP 5.3.0 RC1 packages for Lenny

Tue, 07 Apr 2009 10:32:28 +0000

A few days ago, the first release candidate of PHP 5.3.0 has been published by the PHP Group, providing many improvements :

I just built the packages for Debian GNU/Linux 5.0 “Lenny” on amd64 and i386 and I will maintain them during the whole release cycle (RC2 and so on…).

Please note that they should NOT be installed on production servers : Suhosin and some important patches are not applied, PECL extensions are not available (yet)… They’re here for testing purpose only.

MySQL 5.1 updated

Tue, 07 Apr 2009 08:16:34 +0000

Quick post : MySQL AB has just released MySQL 5.1.33… This maintenance release fixes several bugs… The packages are now available for Lenny and Etch, amd64 and i386…They re-introduces the readline support in the MySQL client… Enjoy.

PHP 5.2.9 is packaged (at last)

Tue, 10 Mar 2009 23:06:26 +0000

Sorry for the delay, but I had to come back from winter sports to have a decent Internet connection…

After being published by the PHP Group, PHP 5.2.9 anf its corresponding PECL extensions is now packaged for Lenny/Etch, amd64/i386. It fixes some annoying crashes and one security issue. The next release should be PHP 5.3.0 with some new interesting features ( MySQL native driver, Phar, namespaces…).

Take a look at the official Changelog for more details before doing this recommanded upgrade.

MySQL 5.1.32 is now available

Tue, 10 Mar 2009 22:44:05 +0000

MySQL AB has just released MySQL 5.1.32. This maintenance release fixes several bugs and one security issue. Upgrading is recommended, especially for those using replication.

Last but not least, it is now packaged for Lenny and Etch, amd64 and i386! Feel free to upgrade your servers…

Dotdeb : Debian 5.0 "Lenny" support in progress...

Thu, 26 Feb 2009 22:46:03 +0000

Dotdeb is now providing Debian packages of PHP5, MySQL 5.1 for your Debian Lenny (and still Debian Etch) LAMP servers

MySQL 5.0.77 available

Wed, 18 Feb 2009 16:49:58 +0000

MySQL 5.0.77 packages are now available on Dotdeb for Debian Etch amd64/i386.

MySQL 5.1.31 available

Mon, 09 Feb 2009 10:39:18 +0000

MySQL 5.1.31 is now available on Dotdeb for Etch amd64/i386. It fixes several problems and brings many enhancement to the previous release.

Please read the official Changelog before upgrading.

MySQL 5.0.75 available

Mon, 22 Dec 2008 21:44:58 +0000

MySQL AB has just made MySQL 5.0.75 available. Even it is just a maintenance release - since the 5.1 branch is now golden - it is now packaged and uploaded to Dotdeb for Etch amd64/i386.

Anyway, if you did not make the jump and still use MySQL 5.0, please upgrade your server, to fix some annoying bugs, fill up some security holes and enhance the overall security of your favorite SGDB. And don’t forget to take a look at the release notes of MySQL 5.0.75.

PHP 5.2.8 available

Tue, 09 Dec 2008 12:30:31 +0000

PHP 5.2.8 is now available on Dotdeb to fix one major security issue.

PHP 5.2.7 updated because magic_quotes_gpc is broken

Sun, 07 Dec 2008 17:54:36 +0000

Stefan Esser has posted a warning about upgrading PHP to the 5.2.7 release :

(…)a change in the ext/filter extension that by default processes all incoming data, broke the magic_quotes_gpc feature. While magic_quotes_gpc itself is deprecated and it is recommended to not rely on it as protection against SQL injection, it is still used in many legacy applications that become very insecure once it is turned off. And exactly that happens with the upgrade to PHP 5.2.7. The fix for this was already commited to the PHP CVS and PHP 5.2.8 will be released next week.

PHP 5.2.7 available

Fri, 05 Dec 2008 17:55:30 +0000

From PHP.net :

The PHP development team would like to announce the immediateavailability of PHP 5.2.7. This release focuses on improving the stability ofthe PHP 5.2.x branch with over 120 bug fixes, several of which are security related.All users of PHP are encouraged to upgrade to this release. (…) Further details about the PHP 5.2.7 release can be found in the release announcement for 5.2.7, the full list of changes is available in the ChangeLog for PHP 5.

MySQL 5.1.30 GA available on Dotdeb

Fri, 28 Nov 2008 07:29:15 +0000

MySQL, the most popular open source database, releases on November 27, 2008, its version 5.1 GA (General Availability). It is now available on Dotdeb for Etch (amd64/i386)!

Version 5.1 introduces several enhancements to the already rich set of features. Most notable are partitioning, row based replication, the event scheduler, a new plugin infrastructure, and logs on demand.

There are more new features, but the general improvement is better performance and manageability. Many users have already adopted MySQL 5.1 in production. Their feedback has been reported in the MySQL technical articles. Check them out. MySQL 5.1 is ready for prime time!

Calculate statistics from your Qmail logfiles using Awstats

Mon, 13 Oct 2008 15:06:35 +0000

Awstats is a commonly used program to calculate web statistics from your webserver logfiles. It can detect useragents, referers, unique visitors… But one of its another feature is to build usage reports from your mail server’s logfiles, as seen on this demo.

Here is how to quickly configure Awstats to take profit of your Qmail log files…

Vpopmail 5.4.25 updated

Thu, 09 Oct 2008 12:16:21 +0000

The Vpopmail 5.4.25 packages has been updated to fix a problem with passwords longer than 8 characters.

The /etc/init.d/vpopmail script has been updated to launch simultaneously :

the (enabled by default) POP3 server
the (disabled by default) POP3-SSL server
the (disabled by default) Vpopmaild server

depending on the settings in /etc/vpopmail/options.

Website problem

Mon, 06 Oct 2008 09:22:35 +0000

On the previous week-end, Dotdeb’s website went down due to configuation problems. Sorry for that, it is now fixed.

Qmailadmin 1.2.11 updated

Mon, 29 Sep 2008 11:59:05 +0000

I just updated Qmailadmin 1.2.11 for Etch amd64/i386 to include some changes :

instead of a checkbox to enable/disable spam filtering on pop accounts, there is now a list to chose what to do (no filtering, marking spams, deleting spams, learn spam, learn ham). This allow anyone to easily train your bayesian filters.
Spamassassin is now recommanded and will replace bogofilter in a near future
Clamassassin replaces clamfilter.pl due to performance issues. Please DO update the /etc/procmailrc-* files during the upgrade to ensure virus are scanned.

How to package PHP extensions by yourself

Thu, 25 Sep 2008 12:52:56 +0000

I often receive emails telling me that Dotdeb is a great tool, but that some useful packages are missing, such as some PECL extensions. I wish I could maintain many and many packages, but I don’t think it’s a good idea for the Dotdeb’s overall quality and for my free time ;) Sorry for that.

Then, this article will show you how to build packages from your favorite PECL extensions in a strict Debian way, using the dh-make-php package.

Vpopmail 5.4.25 is now packaged

Wed, 24 Sep 2008 21:55:32 +0000

Vpopmail 5.4.25 has been packaged for Etch amd64/i386 to fix some annoying bugs. It’s safe and recommanded to upgrade your servers to this version.

For more information, read the official Changelog.

Today is...

Wed, 24 Sep 2008 12:46:58 +0000

… World Day Against Software Patents

You can :

read the press announce
sign or comment the petition
spread the word
so many other things to fight those absurd patents…

ClamAV removed from Dotdeb

Mon, 22 Sep 2008 08:50:36 +0000

FYI, ClamAV has been removed from Dotdeb, since it is more actively maintained on Debian Volatile.

Volatile is now part of the Debian project and will be activated by default on Debian Lenny. Its goal is to provide up-to-date packages of some specific pieces of software (ClamAV, Spamassassin for example). Please use it instead of Dotdeb for your mail-filtering packages.

How to bind your Qmail server to a specific IP address

Wed, 27 Aug 2008 13:04:43 +0000

Just a little tip :

By default, Qmail listens to all the available IP address on the machine (0.0.0.0). It is possible to change this behaviour to bind Qmail to a specific IP.

We suppose that you are using Qmail from Dotdeb and launching it using the provided init script, /etc/init.d/qmail. Just edit it and change these lines :

 sh -c "start-stop-daemon --start --quiet --user qmaild \
 --pidfile /var/run/tcpserver_smtpd.pid --make-pidfile \
 --exec /usr/bin/tcpserver -- -H -P -R -l 0 \
 -u `id -u qmaild` -g `id -g nobody` -x /etc/tcp.smtp.cdb 0 smtp \
 $rblsmtpd /usr/sbin/qmail-smtpd 2>&1 \
 | $logger &"

by those ones :

Using the Google Perftools to speed up your MySQL server

Mon, 25 Aug 2008 15:13:44 +0000

The Google Perftools, especially tcmalloc (Thread Caching Malloc), can be very useful to speed up your applications, depending on your environment :

TCMalloc is faster than the glibc 2.3 malloc (available as a separate library called ptmalloc2) and other mallocs that I have tested. ptmalloc2 takes approximately 300 nanoseconds to execute a malloc/free pair on a 2.8 GHz P4 (for small objects). The TCMalloc implementation takes approximately 50 nanoseconds for the same operation pair.

Mirroring Dotdeb

Mon, 25 Aug 2008 09:36:35 +0000

If Dotdeb is useful for you and if you want to mirror it, just add a cron job to periodically fetch the packages :

rsync -a --delete rsync.dotdeb.org::packages/ /your/local/path/

Then, if you wish your mirror to appear on the mirrors list, send me its full URL.

Note 1 : mirroring once a day should be enough. More frequent updates could lead to a ban without any warning. Note 2 : Using anything else than Rsync (Wget, HTTrack…) could lead to a ban without any warning.

Storing your PHP sessions using memcached

Mon, 25 Aug 2008 09:02:46 +0000

Using PHP sessions can be a problem when your PHP applications are load-balanced on many web servers. You can store them on a NFS export or recode the session_set_save_handler using a SQL backend for example. But there is no solution more efficient, more scalable, more performant and easier to deploy than using memcached…

Memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load…

How to enable greylisting on your Qmail server

Sun, 24 Aug 2008 18:26:52 +0000

Greylisting is very useful to avoid most of the incoming spam on your mail server. The Qmail packages shipped on Dotdeb have built-in MySQL-based greylisting. Here is how to enable it…

Installation

First of all, be sure to have Qmail installed from Dotdeb with a version number greater than 1.03-37.dotdeb.1. Then, since we’ll use a MySQL backend to share the greylisting database between several servers, be sure to have MySQL installed somewhere on your boxes.

How to use PHP5 and PHP4 on the same Apache2 server

Sun, 24 Aug 2008 13:38:57 +0000

Since PHP4 is officially dead, it is now urgent to migrate your applications to PHP5, but it’s not that easy and you’ll have to test them before replacing PHP4 by PHP5 on your server. This article will help you to install both PHP4 and PHP5 on your box and swicth easily between them…

The problem

It is not possible to enable both PHP4 and PHP5 Apache2 modules on the same webserver, it causes shared objects collision. Then, the idea is to enable PHP5 as Apache2 module on one side and PHP4 as CGI on the other side.

MySQL 5.0.67 available

Sun, 24 Aug 2008 13:11:04 +0000

Norbert Tretkowski recently worked on packaging MySQL 5.0.67, the latest Community Edition release of MySQL Server. But, since the next Debian version - Lenny - is already frozen, the packages were not uploaded to the official archive.

Instead of that, I rebuilt them and made them available on Dotdeb for Etch amd64/i386.

Please take a look at the official Changelog before upgrading and thank Norbert for his good work.

How to enable the SMTP authentification on your Qmail server

Sun, 24 Aug 2008 12:44:02 +0000

The Qmail package from Dotdeb has been built with SMTP-auth features (but disabled by default). Here is the way to use them…

Installation

First of all, we suppose that :

you installed the last Qmail and Vpopmail packages from Dotdeb
you’re launching them using the bundled init scripts (with tcpserver)

Configuration

To enable SMTP-auth, you just have to edit the /etc/init.d/qmail init script and replace these lines :

sh -c "start-stop-daemon --start --quiet --user qmaild
 --pidfile /var/run/tcpserver_smtpd.pid --make-pidfile
 --exec /usr/bin/tcpserver -- -R
 -u `id -u qmaild` -g `id -g nobody` -x /etc/tcp.smtp.cdb 0 smtp
 $rblsmtpd /usr/sbin/qmail-smtpd 2>&1
 | $logger &"

by these ones :

About

Sat, 23 Aug 2008 18:24:20 +0000

Dotdeb used to be an extra repository for Debian releases up to Debian 8 “Jessie” with packages such as:

Nginx 1.14,
PHP 7.0,
useful PHP extensions : apcu, imagick, mongo, Pinba, xcache, Xdebug, XHprof…
Redis < 4.0,

Dotdeb supported both amd64 and i386 architectures.

Dotdeb reached its end of life in June 2020 (see So Long, and Thanks for All the Fish). Its packages stayed online, unmaintained, so that existing servers would keep working. They will be removed on December 31st, 2026 (see Dotdeb is shutting down on December 31st, 2026).

PHP 4.4.9 available

Sat, 23 Aug 2008 17:55:48 +0000

On August 7th, the PHP Group has published the last version of PHP4, numbered 4.4.9 :

It continues to improve the security and the stability of the 4.4 branch and all users are strongly encouraged to upgrade to it as soon as possible. This release wraps up all the outstanding patches for the PHP 4.4 series, and is therefore the last PHP 4.4 release.

On August 22nd, Stefan Esser released the appropriate Suhosin patch, allowing me to package PHP 4.4.9 for Debian Etch amd64/i386 (Sarge support is now discontinued).

Instructions

Sat, 23 Aug 2008 16:58:40 +0000

Warning: Dotdeb is no longer maintained, and its packages have known security vulnerabilities that will never be fixed. Do not install them. All Dotdeb repositories will be shut down on December 31st, 2026 (see Dotdeb is shutting down on December 31st, 2026).

The instructions below are kept for reference only.

Using Dotdeb is very simple:

1. Add the main repository to your sources.list

Depending on your distribution (Jessie or Wheezy), add these two lines to your /etc/apt/sources.list file: