PHP 5.4.16 for Wheezy and Squeeze

Posted by & filed under PHP.

On June 6th 2013, the PHP group has released PHP 5.4.16. These releases fix about 15 bugs, including CVE-2013-2110. All users of PHP are encouraged to upgrade to PHP 5.4.16. The corresponding packages are now available on Dotdeb : for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”, on both amd64 and i386 architectures. Please note that php5-readline… Read more »

MySQL 5.5.31 for Squeeze

Posted by & filed under MySQL.

Packages of MySQL 5.5.31 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fix some serious vulnerabilities and InnoDB-, partition- and replication-related bugs as well. Please note that the Pinba engine has also been rebuilt to be used against this new version. As usual, please read carefully the full Changelog before… Read more »

Security : Nginx 1.4.1

Posted by & filed under Nginx.

Nginx 1.4.1 has been released on May 7th 2013, with the fix for the stack-based buffer overflow security problem in nginx 1.3.9 – 1.4.0, discovered by Greg MacManus, of iSIGHT Partners Labs (CVE-2013-2028). As a consequence, Dotdeb’s packages of Nginx 1.4.1 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386). As… Read more »

PHP 5.3.23

Posted by & filed under PHP.

On March 14th 2013, the PHP group has released PHP 5.3.23. These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13. The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :… Read more »

PHP 5.4.13

Posted by & filed under PHP.

On March 14th 2013, the PHP group has released PHP 5.4.13. These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13. The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :… Read more »

PHP 5.4.5 and PHP 5.3.15

Posted by & filed under PHP.

On july 19th 2012, the PHP group has released PHP 5.4.5 and PHP 5.3.15, that bring over 30 bug fixes, including a fix for a security related overflow issue in the stream implementation. The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures (see the installation instructions). Please also… Read more »

Critical update : MySQL 5.5.25a

Posted by & filed under MySQL.

The packages of MySQL 5.5.25a are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes a very annoying bug on InnoDB : bug #65745, “UPDATE on InnoDB table enters recursion, eats all disk space”. As usual, please read carefully the full Changelog before upgrading.

PHP 5.3.14

Posted by & filed under PHP.

On june 14th 2012, the PHP group has released PHP 5.3.14, that brings over 30 bug fixes, some of which are security related : A weakness in the DES implementation of crypt and a heap overflow issue in the phar extension. Please also note that the use of php://fd streams is now restricted to the CLI… Read more »

MySQL 5.1 discontinued on Dotdeb

Posted by & filed under MySQL.

During the last weeks, MySQL suffered from many vulnerabilities (see DSA-2429-1 and DSA-2496-1). Due to the non-disclosure of security patch information from Oracle, the Debian security team is now forced to ship upstreams version update of MySQL 5.1 (5.1.63 as of this writing). Then it makes no sense for Dotdeb to duplicate this effort and… Read more »

Redis 2.4.14

Posted by & filed under Redis.

Redis 2.4.14 has been released to fix many non trivial bugs : [BUGFIX] Fixed issue #518 (Redis 99% CPU when master down). [BUGFIX] Fixed issue #516 (ZINTERSTORE mixing sets and zsets). [BUGFIX] Fixed a bug in install_server.sh when using chkconfig [BUGFIX] Fixes to –test-memory implementation. [BUGFIX] Allow PREFIX to be overridden in Makefile. [BUGFIX] The… Read more »