Php on Dotdeb

PHP 5.6.40 for Wheezy

Sat, 12 Jan 2019 21:36:14 +0000

On January 10th 2019, the PHP group released PHP 5.6.40.

The PHP development team announces the immediate availability of PHP 5.6.40. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

Please note that according to the PHP version support timelines, PHP 5.6.40 is the last scheduled release of PHP 5.6 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.6 branch. If your PHP installation is based on PHP 5.6, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3.

PHP 7.0.33 for Jessie

Sat, 08 Dec 2018 06:48:34 +0000

On December 6th 2018, the PHP group published PHP 7.0.33.

The PHP development team announces the immediate availability of PHP 7.0.33. Five security-related issues were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Please note that according to the PHP version support timelines, PHP 7.0.33 is the last scheduled release of PHP 7.0 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 7.0 branch. If your PHP installation is based on PHP 7.0, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3.

PHP 5.6.39 for Wheezy

Sat, 08 Dec 2018 01:51:21 +0000

On December 6th 2018, the PHP group released PHP 5.6.39.

The PHP development team announces the immediate availability of PHP 5.6.39. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

Please note that according to the PHP version support timelines, PHP 5.6.39 is the last scheduled release of PHP 5.6 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.6 branch. If your PHP installation is based on PHP 5.6, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3.

PHP 7.0.32 for Jessie

Wed, 19 Sep 2018 09:53:07 +0000

On September 13th 2018, the PHP group published PHP 7.0.32.

This is a security release. One security bug has been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.32 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

Important reminder: Jessie entered its “Long Term Support” phase in June 2018 and PHP 7.0 will reach its “End Of Life” in December of this year. Please consider upgrading to more recent versions of both Debian and PHP.

PHP 5.6.38 for Wheezy

Wed, 19 Sep 2018 09:50:36 +0000

On September 13th 2018, the PHP group released PHP 5.6.38.

This is a security release. One security bug has been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.38 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Important reminder: Wheezy is “End Of Life” since May 2018 and PHP 5.6 will at the end of this year. These packages are provided for legacy servers. Please consider upgrading to more recent versions of both Debian and PHP.

PHP 7.0.31 for Jessie

Sun, 22 Jul 2018 21:00:30 +0000

On July 19th 2018, the PHP group published PHP 7.0.31.

This is a security release. Several security bugs have been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.31 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.37 for Wheezy

Sun, 22 Jul 2018 20:52:47 +0000

On July 20th 2018, the PHP group released PHP 5.6.37.

This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.37 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.6.36 for Wheezy

Sat, 28 Apr 2018 00:57:39 +0000

On April 26th 2018, the PHP group released PHP 5.6.36.

This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.36 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.30 for Jessie

Thu, 26 Apr 2018 18:50:45 +0000

On April 26th 2018, the PHP group published PHP 7.0.30.

This is a security release. Several security bugs have been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.30 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.35 for Wheezy

Sun, 01 Apr 2018 09:57:15 +0000

On March 29th 2018, the PHP group released PHP 5.6.35.

This is a security release. One security bug was fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.35 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.29 for Jessie

Sat, 31 Mar 2018 13:57:17 +0000

On March 29th 2018, the PHP group published PHP 7.0.29.

This is a security release. One security bug was fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.29 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.28 for Jessie

Tue, 13 Mar 2018 09:26:39 +0000

On March 1st 2018, the PHP group published PHP 7.0.28.

This is a security release. One security bug was fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.28 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.34 for Wheezy

Mon, 12 Mar 2018 20:06:29 +0000

On March 1st 2018, the PHP group released PHP 5.6.34.

This is a security release. One security bug was fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.34 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.6.33 for Wheezy

Fri, 05 Jan 2018 22:50:56 +0000

On January 4th 2018, the PHP group released PHP 5.6.33.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.33 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.27 for Jessie

Thu, 04 Jan 2018 22:18:06 +0000

On January 4th 2018, the PHP group published PHP 7.0.27.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

This release marks the end of the two years active support period for the 7.0 branch. The further releases of the 7.0 branch will be issued on demand and contain only critical security relevant bug fixes. The security support is provided till December 3rd, 2018. It is a good time to plan the migration to PHP 7.1 or 7.2.

PHP 7.0.26 for Jessie

Sat, 25 Nov 2017 19:31:47 +0000

On November 23rd 2017, the PHP group published PHP 7.0.26.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.26 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.32 for Wheezy

Fri, 03 Nov 2017 01:07:12 +0000

On October 26th 2017, the PHP group released PHP 5.6.32.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.32 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.25 for Jessie

Thu, 02 Nov 2017 17:36:33 +0000

On October 26th 2017, the PHP group published PHP 7.0.25.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.25 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.24 for Jessie

Mon, 09 Oct 2017 01:18:12 +0000

On September 28th 2017, the PHP group published PHP 7.0.24.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.24 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.23 for Jessie

Thu, 07 Sep 2017 03:30:25 +0000

On August 31st 2017, the PHP group published PHP 7.0.23.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.23 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.22 for Jessie

Thu, 03 Aug 2017 21:32:56 +0000

On August 3rd 2017, the PHP group published PHP 7.0.22.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.22 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 5.6.31 for Wheezy

Fri, 14 Jul 2017 18:33:48 +0000

On July 6th 2017, the PHP group released PHP 5.6.31.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.31 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.19 for Jessie

Fri, 12 May 2017 19:34:17 +0000

On May 11th 2017, the PHP group published PHP 7.0.19.

The PHP development team announces the immediate availability of PHP 7.0.19. Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.19 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.18 for Jessie

Fri, 14 Apr 2017 17:59:27 +0000

On Apr 13th 2017, the PHP group published PHP 7.0.18.

The PHP development team announces the immediate availability of PHP 7.0.18. Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.18 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.17 for Jessie

Thu, 16 Mar 2017 22:05:52 +0000

On March 16th 2017, the PHP group published PHP 7.0.17.

The PHP development team announces the immediate availability of PHP 7.0.17. Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.17 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.0.16 for Jessie

Fri, 17 Feb 2017 01:06:40 +0000

On February 16th 2017, the PHP group published PHP 7.0.16.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.16 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

PHP 7.1 & Dotdeb

Thu, 26 Jan 2017 23:38:13 +0000

Dotdeb is a one-man project that is providing up-to-date PHP packages for more than 14 years now, and I’m very proud and grateful for the community that gathered around it.

From the start, my goal has been to sustain the effort of backporting packages with reliability and compatibility with stock Debian distributions in mind. People got that and have been trusting in Dotdeb and deploying it on thousands of development and production stacks. Thank you very much for that! I mean it.

PHP 7.0.15 for Jessie

Sat, 21 Jan 2017 21:16:58 +0000

On January 19th 2017, the PHP group published PHP 7.0.15.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.15 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug.

I’ll detail the plan for PHP 7.1 in a future post.

PHP 5.6.30 for Wheezy

Sat, 21 Jan 2017 21:15:05 +0000

On January 19th 2017, the PHP group released PHP 5.6.30.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

According to our release calendar, this PHP 5.6 version is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of two years. PHP 5.6 users that need further bugfixes are encouraged to upgrade to PHP 7.

PHP 7.0.14 for Jessie

Mon, 12 Dec 2016 20:18:29 +0000

On December 8th 2016, the PHP group published PHP 7.0.14.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.14 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.29 for Wheezy

Mon, 12 Dec 2016 20:16:20 +0000

On December 8th 2016, the PHP group released PHP 5.6.29.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.29 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.6.28 for Wheezy

Sat, 12 Nov 2016 21:42:06 +0000

On November 10th 2016, the PHP group released PHP 5.6.28.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.28 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.13 for Jessie

Thu, 10 Nov 2016 19:34:16 +0000

On November 10th 2016, the PHP group published PHP 7.0.13.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.13 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 7.0.12 for Jessie

Mon, 17 Oct 2016 18:13:10 +0000

On October 13th 2016, the PHP group published PHP 7.0.12.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.12 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.27 for Wheezy

Mon, 17 Oct 2016 18:11:28 +0000

On October 14th 2016, the PHP group released PHP 5.6.27.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.27 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.11 for Jessie

Mon, 19 Sep 2016 07:45:47 +0000

On September 15th 2016, the PHP group published PHP 7.0.11.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.11 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 7.0.10 for Jessie

Fri, 19 Aug 2016 07:18:06 +0000

On August 18th 2016, the PHP group published PHP 7.0.10.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.10 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.25 for Wheezy

Fri, 19 Aug 2016 06:03:58 +0000

On August 18th 2016, the PHP group released PHP 5.6.25.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.25 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.9 for Jessie

Fri, 22 Jul 2016 07:28:47 +0000

On July 21st 2016, the PHP group published PHP 7.0.9.

This is a security release. Several security bugs were fixed in this release, including the HTTP_PROXY issue. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.9 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.24 for Wheezy

Fri, 22 Jul 2016 07:26:50 +0000

On July 21st 2016, the PHP group released PHP 5.6.24.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.24 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.5.38 for Wheezy (End of Life)

Fri, 22 Jul 2016 07:22:14 +0000

On July 21st 2016, the PHP group released PHP 5.5.38.

This is a security release that fixes some security related bugs. All PHP 5.5 users are encouraged to upgrade to this version. (…) Note that according to our release schedule, PHP 5.5.38 is the last release of the PHP 5.5 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.5 branch. If your PHP installation is based on PHP 5.5, it may be a good time to start making the plans for the upgrade to PHP 5.6 or PHP 7.0.

PHP 7.0.8 for Jessie

Fri, 24 Jun 2016 18:14:17 +0000

On June 23rd 2016, the PHP group published PHP 7.0.8.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Please also note that bcmatch, dba, mbstring, soap, xml and zip now have their separate dedicated packages.

Packages of PHP 7.0.8 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.23 for Wheezy

Fri, 24 Jun 2016 17:53:51 +0000

On June 23rd 2016, the PHP group released PHP 5.6.23.

Several bugs were fixed in this release, including security-related ones. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.23 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.5.37 for Wheezy

Fri, 24 Jun 2016 17:44:48 +0000

On June 23rd 2016, the PHP group released PHP 5.5.37.

This is a security release, several security bugs were fixed. All PHP 5.5 users are encouraged to upgrade to this version.

And because it’s probably the last PHP 5.5 release before it reaches its security EOL, you’d better upgrade to PHP 5.6 and above as soon as possible.

PHP 5.5.37 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

PHP 7.0.7 for Jessie

Wed, 01 Jun 2016 14:28:57 +0000

On May 26th 2016, the PHP group published PHP 7.0.7.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.7 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and debug (Careful, PHP 7 support from some of them is still very young!).

PHP 5.6.22 for Wheezy

Wed, 01 Jun 2016 14:25:33 +0000

On May 26th 2016, the PHP group released PHP 5.6.22.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.22 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 5.5.36 for Wheezy

Wed, 01 Jun 2016 14:23:13 +0000

On May 26th 2016, the PHP group released PHP 5.5.36.

This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.36 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.11
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.21 for Wheezy

Fri, 29 Apr 2016 17:16:09 +0000

On April 29th 2016, the PHP group released PHP 5.6.21.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.21 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.6 for Jessie

Fri, 29 Apr 2016 17:06:58 +0000

On April 29th 2016, the PHP group published PHP 7.0.6.

This is a security release. Several security bugs were fixed in this release, including CVE-2016-3078 and CVE-2016-3074. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.6 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
The thread-safe version of all these packages will be published soon.

As usual :

PHP 5.6.20 for Wheezy

Fri, 01 Apr 2016 07:40:14 +0000

On March 31st 2016, the PHP group released PHP 5.6.20.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.20 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.5 for Jessie

Fri, 01 Apr 2016 04:57:28 +0000

On March 31st 2016, the PHP group published PHP 7.0.5.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.5 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
The thread-safe version of all these packages will be published soon.

As usual :

PHP 5.5.33 for Wheezy

Tue, 08 Mar 2016 07:10:33 +0000

On March 3rd 2016, the PHP group released PHP 5.5.33.

This is a security release in which two security bugs were fixed. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.33 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.11
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.19 for Wheezy

Sat, 05 Mar 2016 20:07:17 +0000

On March 3rd 2016, the PHP group released PHP 5.6.19.

This is a security release in which several security bugs were fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.19 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.4 for Jessie

Fri, 04 Mar 2016 05:09:22 +0000

On March 3rd 2016, the PHP group published PHP 7.0.4.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.4 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
the memcached.serializer is now igbinary by default. You should change it back to php if you’re upgrading from a previous version.
The thread-safe version of all these packages will be published soon.

As usual :

PHP 5.6.18 for Wheezy

Sun, 07 Feb 2016 20:22:07 +0000

On February 4th 2016, the PHP group released PHP 5.6.18.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.18 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.3 for Jessie

Fri, 05 Feb 2016 23:10:11 +0000

On February 4th 2016, the PHP group published PHP 7.0.3.

This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.3 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

PHP 7 and PHP 5 from Jessie are now co-installable on the same machine
Packages of the following PECL extensions are now available : APCu, APCu_bc, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young.
the memcached.serializer is now igbinary by default. You should change it back to php if you’re upgrading from a previous version.
The thread-safe version of all these packages will be published soon.

As usual :

PHP 7.0.2 for Jessie

Fri, 08 Jan 2016 04:26:32 +0000

On January 7th 2016, the PHP group published PHP 7.0.2.

31 reported bugs has been fixed, including 6 security related issues. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.2 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

You should remove any PHP5 packages before upgrading
Packages of the PECL extensions (Memcache, Memcached, Mongo, Redis, Xdebug…) are still missing.
The thread-safe version of all these packages will be published soon.

Please make sure that you understand the above PHP/Debian/Dotdeb changes and that you don’t need any of the missing features/packages. Your feedbacks are always welcome. Just make sure they are useful.

PHP 5.6.17 for Wheezy

Fri, 08 Jan 2016 04:20:51 +0000

On January 7th 2016, the PHP group released PHP 5.6.17.

This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.17 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0.1 for Jessie

Mon, 28 Dec 2015 01:35:58 +0000

On December 17th 2015, the PHP group published PHP 7.0.1.

Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version.

Packages of PHP 7.0.1 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Please note that :

You should remove any PHP5 packages before upgrading
The bz2 and xmlrpc modules are now packaged separately, respectively name php7.0-bz2 and php7.0-xmlrpc.
Packages of the PECL extensions (Memcache, Memcached, Mongo, Redis, Xdebug…) are still missing and require some work from me.
The thread-safe version of all these packages will be published soon.

PHP 7.0.0 is available for Jessie

Fri, 04 Dec 2015 00:35:00 +0000

On December 3rd 2015, the PHP group published PHP 7.0.0.

PHP 7.0.0 comes with a new version of the Zend Engine, numerous improvements and new features such as :

Improved performance: PHP 7 is up to twice as fast as PHP 5.6

Significantly reduced memory usage

Abstract Syntax Tree

Consistent 64-bit support

Improved Exception hierarchy

Many fatal errors converted to Exceptions

Secure random number generator

Removed old and unsupported SAPIs and extensions

The null coalescing operator (??)

Return and Scalar Type Declarations

Anonymous Classes

Zero cost asserts

The list of changes is recorded in the ChangeLog.

The migration guide is available in the PHP Manual. Please consult it for the detailed list of new features and backward incompatible changes.

PHP 7.0-RC8 for Jessie

Mon, 30 Nov 2015 04:44:50 +0000

On November 26th 2015, the PHP group published the eighth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 8 contains fixes for 11 reported bugs. (…) This release candidate prepares the short jump to the RTM. If no major issues appear, the 7.0.0 general availability (GA) release will be brought out on December 3rd. You can also read the full list of planned releases on our wiki.

PHP 5.6.16 for Wheezy

Mon, 30 Nov 2015 04:29:50 +0000

On November 26th 2015, the PHP group released PHP 5.6.16.

Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.16 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0-RC7 for Jessie

Thu, 12 Nov 2015 20:37:05 +0000

On November 12th 2015, the PHP group published the seventh release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 7 contains fixes for 17 reported bugs. (…) This release candidate is unplanned and ships instead of the announced RTM for the reasons of yet additional quality improvement. If no major issues appear within the usual two-week test period, the 7.0.0 general availability (GA) release will be brought out. You can also read the full list of planned releases on our wiki.

PHP 5.6.15 for Wheezy

Tue, 03 Nov 2015 19:14:54 +0000

On October 29th 2015, the PHP group released PHP 5.6.15.

Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.15 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0-RC6 for Jessie

Thu, 29 Oct 2015 19:17:36 +0000

On October 29th 2015, the PHP group published the sixth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 6 contains fixes for 10 reported bugs and marks the end of the pre-release circle.

Packages of PHP 7.0-RC6 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Disclaimer : THIS IS A DEVELOPMENT PREVIEW (from a PHP upstream and from a Dotdeb/Debian packaging perspectives) - DO NOT USE IT IN PRODUCTION!

PHP 7.0-RC5 for Jessie

Mon, 19 Oct 2015 15:15:00 +0000

On October 15th 2015, the PHP group published the fifth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 5 contains fixes for 11 reported bugs and over 100 commits with various improvements.

Packages of PHP 7.0-RC5 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Disclaimer : THIS IS A DEVELOPMENT PREVIEW (from a PHP upstream and from a Dotdeb/Debian packaging perspectives) - DO NOT USE IT IN PRODUCTION!

PHP 5.5.30 for Wheezy

Mon, 12 Oct 2015 02:42:05 +0000

On October 1st 2015, the PHP group released PHP 5.5.30.

This is a security release. Two security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.30 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.11
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.14 for Wheezy

Fri, 02 Oct 2015 15:20:35 +0000

On October 1st 2015, the PHP group released PHP 5.6.14.

Two security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.14 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

PHP 7.0-RC4 for Jessie

Thu, 01 Oct 2015 20:08:39 +0000

On October 1st 2015, the PHP group published the fourth release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 4 contains fixes for 22 reported bugs and over 100 commits with various improvements.

Packages of PHP 7.0-RC4 are now available for Debian 8 “Jessie” on amd64 and i386 architectures.

Disclaimer : THIS IS A DEVELOPMENT PREVIEW (from a PHP upstream and from a Dotdeb/Debian packaging perspectives) - DO NOT USE IT IN PRODUCTION!

PHP 7.0-RC3 for Jessie

Fri, 18 Sep 2015 06:17:31 +0000

On September 17th 2015, the PHP group published the third release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 3 contains fixes for 19 reported bugs and over 100 commits with various improvements.

This release provides a noticeable new Opcache feature which makes possible to move PHP code pages into the huge memory pages. It can be enabled with opcache.huge_code_pages=1 in php.ini and can bring about 2% performance gain on supported platforms. Please help us to test this feature by enabling it and providing feedback.

PHP 7.0-RC2 is available for Debian 8 "Jessie"

Tue, 08 Sep 2015 02:50:24 +0000

On September 4th 2015, the PHP group published the second release candidate of the upcoming new major branch, PHP 7 :

PHP 7.0.0 RC 2 contains fixes for 28 reported bugs, 7 of which are security related, and altogether over 250 commits with various improvements.

PHP 7.0.0 comes with new version of the Zend Engine with features such as (incomplete list):

Improved performance: PHP 7 is up to twice as fast as PHP 5.6

Consistent 64-bit support

Many fatal errors are now Exceptions

Removal of old and unsupported SAPIs and extensions

The null coalescing operator (??)

Combined comparison Operator (< =>)

Return Type Declarations

Scalar Type Declarations

Anonymous Classes

For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes.

PHP 5.4.45, for Wheezy and Squeeze

Tue, 08 Sep 2015 02:00:16 +0000

On September 4th 2015, the PHP group released PHP 5.4.45.

Ten security-related issues were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version.

(…)

Please note that according to the PHP version support timelines, PHP 5.4.45 is the last scheduled release of PHP 5.4 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.4 branch. If your PHP installation is based on PHP 5.4, it may be a good time to start making the plans for the upgrade to PHP 5.5 or PHP 5.6.

PHP 5.5.29 for Wheezy

Mon, 07 Sep 2015 19:00:34 +0000

On September 4th 2015, the PHP group released PHP 5.5.29.

This is a security release. Many security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.29 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.10
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.13 for Wheezy

Fri, 04 Sep 2015 22:48:23 +0000

On September 4th 2015, the PHP group released PHP 5.6.13.

11 security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.13 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Note : php5-memcached still lacks JSON support.

PHP 5.5.28 for Wheezy

Sun, 23 Aug 2015 05:51:04 +0000

On August 6th 2015, the PHP group released PHP 5.5.28.

12 security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.28 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.10
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog before upgrading.

PHP 5.6.12 for Wheezy

Sat, 08 Aug 2015 23:49:28 +0000

On August 6th 2015, the PHP group released PHP 5.6.12.

12 security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.12 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Note : php5-memcached still lacks JSON support.

PHP 5.4.43, for Wheezy and Squeeze

Wed, 22 Jul 2015 23:22:38 +0000

On July 9th 2015, the PHP group released PHP 5.4.43.

Five security-related issues in PHP were fixed in this release, including CVE-2015-3152. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.10
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.3
xhprof 0.9.4
zendopcache 7.0.5

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.27 for Wheezy

Wed, 15 Jul 2015 18:23:22 +0000

On July 10th 2015, the PHP group released PHP 5.5.27.

Several bugs were fixed in this release as well as CVE-2015-3152. All PHP 5.5 users are encouraged to upgrade to this version. (…) this PHP 5.5 version is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of one year. PHP 5.5 users that need further bugfixes are encouraged to upgrade to PHP 5.6.

PHP 5.6.11 for Wheezy

Tue, 14 Jul 2015 05:52:34 +0000

On July 10th 2015, the PHP group released PHP 5.6.11.

Five security-related issues in PHP were fixed in this release, including CVE-2015-3152. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.11 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

Note : php5-memcached still lacks JSON support.

PHP 5.4.42, for Wheezy and Squeeze

Wed, 24 Jun 2015 05:40:56 +0000

On June 11th 2015, the PHP group released PHP 5.4.42.

Six security-related issues in PHP were fixed in this release, as well as several security issues in bundled sqlite library (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416). All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.5.26 for Wheezy

Wed, 17 Jun 2015 06:35:38 +0000

On June 11th 2015, the PHP group released PHP 5.5.26.

Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.26 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.9
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please note that the PCRE issue that Apache users encountered is now fixed.

PHP 5.6.10 for Wheezy

Fri, 12 Jun 2015 04:45:04 +0000

On June 11th 2015, the PHP group released PHP 5.6.10.

Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.10 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with packages of Xdebug (yeah!), XHprof (yeah! x2) and other PECL extensions.

PHP 5.4.41, for Wheezy and Squeeze

Fri, 22 May 2015 14:32:33 +0000

On May 14th 2015, the PHP group released PHP 5.4.41.

Seven security-related issues were fixed in this version. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.8
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4
zendopcache 7.0.5

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.25 for Wheezy

Fri, 22 May 2015 04:24:01 +0000

On May 14th 2015, the PHP group released PHP 5.5.25.

Several bugs have been fixed. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.25 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.8
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.9 for Wheezy

Wed, 20 May 2015 21:03:00 +0000

On May 14th 2015, the PHP group released PHP 5.6.9.

Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.9 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Xcache, Xdebug and Xhprof are currently being worked on and should be available soon

PHP 5.4.40, for Wheezy and Squeeze

Thu, 23 Apr 2015 03:41:52 +0000

On April 16th 2015, the PHP group released PHP 5.4.40.

14 security-related bugs were fixed in this release, including CVE-2014-9709, CVE-2015-2301, CVE-2015-2783, CVE-2015-1352. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.6
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4
zendopcache 7.0.5

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.24 for Wheezy

Thu, 23 Apr 2015 01:15:19 +0000

On April 16th 2015, the PHP group released PHP 5.5.24.

Several bugs have been fixed some of them beeing security related, like CVE-2015-1351 and CVE-2015-1352. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.24 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.6
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.8 for Wheezy

Wed, 22 Apr 2015 07:03:09 +0000

On April 16th 2015, the PHP group released PHP 5.6.8.

Several bugs have been fixed some of them beeing security related, like CVE-2015-1351 and CVE-2015-1352. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.8 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Xcache, Xdebug and Xhprof are currently being worked on and should be available in the next few days

PHP 5.4.39, for Wheezy and Squeeze

Sun, 22 Mar 2015 20:36:50 +0000

On March 19th 2015, the PHP group released PHP 5.4.39.

Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.5
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4
zendopcache 7.0.4

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.23 for Wheezy

Sun, 22 Mar 2015 18:22:05 +0000

On March 20th 2015, the PHP group released PHP 5.5.23.

Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.23 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.5
pecl_http 1.7.6
pinba (master)
redis 2.2.7
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.2
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.7 for Wheezy

Sun, 22 Mar 2015 15:55:47 +0000

On March 20th 2015, the PHP group released PHP 5.6.7.

Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.7 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m still working on it, sorry for the delay
End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

PHP 5.4.38, for Wheezy and Squeeze

Sun, 01 Mar 2015 02:38:36 +0000

On February 18th 2015, the PHP group released PHP 5.4.38.

Seven security-related bugs were fixed in this release, including CVE-2015-0273 and mitigation for CVE-2015-0235. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.1
xhprof 0.9.4
zendopcache 7.0.4

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.22 for Wheezy

Thu, 26 Feb 2015 05:36:15 +0000

On February 19th 2015, the PHP group released PHP 5.5.22.

This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.22 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.1
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.6 for Wheezy

Sat, 21 Feb 2015 17:31:52 +0000

On February 19th 2015, the PHP group released PHP 5.6.6.

This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.6 users are encouraged to upgrade to this version. (…) The list of changes is recorded in the ChangeLog.

PHP 5.6.6 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors.

Notes :

Regression : php5-memcached still lacks JSON support
Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m working on it
End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

PHP 5.4.37, for Wheezy and Squeeze

Fri, 06 Feb 2015 06:02:19 +0000

On January 22nd 2015, the PHP group released PHP 5.4.37.

Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.1
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.7
xhprof 0.9.4
zendopcache 7.0.4

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.21 for Wheezy

Wed, 04 Feb 2015 06:20:09 +0000

On January 22nd 2015, the PHP group released PHP 5.5.21.

This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.21 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.0
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.7
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.5 for Wheezy

Mon, 02 Feb 2015 01:54:15 +0000

On January 22nd 2015, the PHP group released PHP 5.6.5.

This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.6 users are encouraged to upgrade to this version. (…) The list of changes is recorded in the ChangeLog.

PHP 5.6.5 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

Notes :

Because of performance issues with Zend thread safety (pthreads depends on it), I had to disable it on the wheezy-php56 repo. Users using pthreads now have to use the wheezy-php56-zts repository instead. See the instructions for more details
Regression : php5-memcached still lacks JSON support
Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m working on it
End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

PHP 5.4.36, for Wheezy and Squeeze

Sat, 20 Dec 2014 22:44:50 +0000

On December 18th 2014, the PHP group released PHP 5.4.36.

Two security-related bugs were fixed in this release, including the fix for CVE-2014-8142. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.8
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.6
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.20 for Wheezy

Sat, 20 Dec 2014 21:45:42 +0000

On December 18th 2014, the PHP group released PHP 5.5.20.

This release fixes several bugs and one CVE related to unserialization. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.20 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.8
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.6
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.6.4 for Wheezy

Sat, 20 Dec 2014 17:03:39 +0000

On December 18th 2014, the PHP group released PHP 5.6.4.

Two security-related bugs were fixed in this release, including the fix for CVE-2014-8142. All PHP 5.4 users are encouraged to upgrade to this version.

PHP 5.6.4 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

Please also note these points :

Regression : php5-memcached lacks JSON support
Missing packages : Xcachen Xdebug and Xhprof are missing for now
End of support : Spplus won’t be supported anymore. Pinba’s fates hasn’t been decided yet.

As a consequence :

PHP 5.4.35, for Wheezy and Squeeze

Tue, 18 Nov 2014 23:39:18 +0000

On November 13th 2014, the PHP group released PHP 5.4.35.

4 security-related bugs were fixed in this release, including the fix for CVE-2014-3710. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.7
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.8
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.6
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.19 for Wheezy

Tue, 18 Nov 2014 07:06:45 +0000

On November 13th 2014, the PHP group released PHP 5.5.19.

This release fixes several bugs and one CVE in the fileinfo extension. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.19 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. They include a fix for regressions in the FPM SAPI (See 1, 2 and 3) that is present in the upstream version of PHP 5.5.19.

PHP 5.6.3 for Wheezy

Mon, 17 Nov 2014 07:25:03 +0000

On November 13th 2014, the PHP group released PHP 5.6.3.

This release fixes several bugs and one CVE in the fileinfo extension. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.3 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. They include a fix for regressions in the FPM SAPI (See 1, 2 and 3) that is present in the upstream version of PHP 5.6.3.

PHP 5.4.34, for Wheezy and Squeeze

Thu, 23 Oct 2014 22:30:44 +0000

On October 16th 2014, the PHP group released PHP 5.4.34.

6 security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. Also, a fix for OpenSSL which produced regressions was reverted. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.5.18 for Debian Wheezy

Wed, 22 Oct 2014 19:34:05 +0000

On October 16th 2014, the PHP group released PHP 5.5.18.

Several bugs were fixed in this release. A regression in OpenSSL introduced in PHP 5.5.17 has also been addressed in this release. PHP 5.5.18 also fixes 4 CVEs in different components. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.18 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.6.2 for Wheezy

Wed, 22 Oct 2014 01:01:48 +0000

On October 16th 2014, the PHP group released PHP 5.6.2.

Four security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.2 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures.

Please also note these points :

Regression : php5-memcached lacks JSON support
Missing packages : Xcachen Xdebug and Xhprof are missing for now
End of support : Spplus won’t be supported anymore. Pinba’s fates hasn’t been decided yet.

As a consequence :

PHP 5.6.1 for Wheezy

Fri, 03 Oct 2014 14:37:12 +0000

On October 2nd 2014, the PHP group released PHP 5.6.1.

Several bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

PHP 5.6.1 packages are now available on Dotdeb for Debian 7.6 “Wheezy”, on both amd64 and i386 architectures.

Please also note these points :

Regression : php5-memcached lacks JSON support
Missing packages : Xdebug and Xhprof are missing for now
End of support : Spplus won’t be supported anymore. Xcache’s and Pinba’s fates haven’t been decided yet

As a consequence :

PHP 5.6.0 packages for Wheezy

Mon, 22 Sep 2014 04:45:22 +0000

On August 28th, the PHP group released the first stable version of the new major branch, PHP 5.6.0 :

The PHP Development Team announces the immediate availability of PHP 5.6.0. This new version comes with new features, some backward incompatible changes and many improvements.

The main features of PHP 5.6.0 include:

Constant scalar expressions.

Variadic functions and argument unpacking using the … operator.

Exponentiation using the ** operator.

Function and constant importing with the use keyword.

phpdbg as an interactive integrated debugger SAPI.

php://input is now reusable, and $HTTP_RAW_POST_DATA is deprecated.

GMP objects now support operator overloading.

File uploads larger than 2 gigabytes in size are now accepted.

For a full list of new features, you may read the new features chapter of the migration guide.

PHP 5.6.0 also introduces changes that affect compatibility:

Array keys won’t be overwritten when defining an array as a property of a class via an array literal.

json_decode() is more strict in JSON syntax parsing.

Stream wrappers now verify peer certificates and host names by default when using SSL/TLS.

GMP resources are now objects.

Mcrypt functions now require valid keys and IVs.

PHP 5.4.33, for Wheezy and Squeeze

Sat, 20 Sep 2014 06:56:49 +0000

On September 18th 2014, the PHP group released PHP 5.4.33.

10 bugs were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version.

This release is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of one year. PHP 5.4 users that need further bugfixes are encouraged to upgrade to PHP 5.6 or PHP 5.5.

PHP 5.5.17 for Debian Wheezy

Fri, 19 Sep 2014 05:39:15 +0000

On September 18th 2014, the PHP group released PHP 5.5.17.

Several bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.17 packages are now available on Dotdeb for Debian 7.6 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.6
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.7
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.2.5
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.32, for Wheezy and Squeeze

Sat, 23 Aug 2014 12:08:05 +0000

On August 21st 2014, the PHP group has released PHP 5.4.32.

16 bugs were fixed in this release, including the following security-related issues: CVE-2014-2497, CVE-2014-3538, CVE-2014-3587, CVE-2014-3597, CVE-2014-4670, CVE-2014-4698, CVE-2014-5120. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.6
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.5
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.16 for Debian Wheezy

Fri, 22 Aug 2014 16:36:15 +0000

On August 22nd 2014, the PHP group has released PHP 5.5.16.

This release fixes several bugs against PHP 5.5.15 and resolves CVE-2014-3538, CVE-2014-3587, CVE-2014-2497, CVE-2014-5120 and CVE-2014-3597.

All PHP users are encouraged to upgrade to this new version.

PHP 5.5.16 packages are now available on Dotdeb for Debian 7.6 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.6
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.5
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.3.29 (End of Life) for Squeeze

Fri, 15 Aug 2014 08:55:04 +0000

On August 14th 2014, the PHP group has released PHP 5.3.29.

The PHP development team announces the immediate availability of PHP 5.3.29. This release marks the end of life of the PHP 5.3 series. Future releases of this series are not planned. All PHP 5.3 users are encouraged to upgrade to the current stable version of PHP 5.5 or previous stable version of PHP 5.4, which are supported till at least 2016 and 2015 respectively.

PHP 5.3.29 contains about 25 potentially security related fixes backported from PHP 5.4 and 5.5.

PHP 5.4.31, for Wheezy and Squeeze

Sun, 27 Jul 2014 20:37:53 +0000

On July 24th 2014, the PHP group has released PHP 5.4.31. Over 10 bugs were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.6
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.4
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4
zendopcache 7.0.3

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.15 for Debian Wheezy

Thu, 24 Jul 2014 18:35:13 +0000

On July 24th 2014, the PHP group has released PHP 5.5.15.

This release fixes several bugs against PHP 5.5.14.

All PHP users are encouraged to upgrade to this new version.

PHP 5.5.15 packages are now available on Dotdeb for Debian 7.5 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.6
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.4
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.30, for Wheezy and Squeeze

Mon, 30 Jun 2014 06:02:46 +0000

On June 26th 2014, the PHP group has released PHP 5.4.30. Over 20 bugs were fixed in this release, including the following security issues: CVE-2014-3981, CVE-2014-0207, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-4049, CVE-2014-3515. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

PHP 5.5.14 for Debian Wheezy

Sun, 29 Jun 2014 23:23:19 +0000

On June 27th 2014, the PHP group has released PHP 5.5.14.

This release fixes several bugs against PHP 5.5.13. Also, this release fixes a total of 8 CVEs, half of them concerning the FileInfo extension.

All PHP users are encouraged to upgrade to this new version.

Please, note that this release also fixes a backward compatibility issue that has been detected in the PHP 5.5.13 release. Still, the fix in PHP 5.5.14 may break some very rare situations. As this tiny compatibility break involves security, and as security is our primary concern, we had to fix it. This concerns bug 67072. For more information about this bug and its actual resolution, please visit our upgrading guide. We apologize for any inconvenience you may have experienced with this behavior.

PHP 5.4.29, for Wheezy and Squeeze

Tue, 10 Jun 2014 06:52:26 +0000

On May 29th 2014, the PHP group has released PHP 5.4.29. 16 bugs were fixed in this release, including two security issues in fileinfo extension. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7 “Wheezy” and Debian 6 “Squeeze”,
on both amd64 and i386 architectures.

The following modules have been packaged too :

APC 3.1.13
apcu 4.0.4
ffmpeg 0.6.0 (Squeeze only)
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4
zendopcache 7.0.3

Please also note that the default permissions on the FPM Unix socket have been fixed, in a secure way.

PHP 5.5.13 for Debian Wheezy

Sun, 08 Jun 2014 00:52:51 +0000

On May 29th 2014, the PHP group has released PHP 5.5.13 :

This release fixes several bugs in PHP 5.5.12, and addresses two CVEs in Fileinfo ( CVE-2014-0238 and CVE-2014-0237).

As a consequence, PHP 5.5.13 packages are now available on Dotdeb for Debian 7.5 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.4
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.5.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.1.0
xdebug 2.2.5
xhprof 0.9.4

Please note that the default permissions on the FPM Unix socket have been fixed, in a secure way.

PHP 5.4.28, for Wheezy and Squeeze

Thu, 08 May 2014 01:42:26 +0000

On May 1st 2014, the PHP group has released PHP 5.4.28. 9 bugs were fixed in this release, including CVE-2014-0185. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.12 for Debian Wheezy

Wed, 07 May 2014 05:44:45 +0000

On April 30th 2014, the PHP group has released PHP 5.5.12 :

This release fixes several bugs against PHP 5.5.11, as well as CVE-2014-0185 regarding PHP-FPM. All PHP users are encouraged to upgrade to this new version.

As a consequence, PHP 5.5.12 packages are now available on Dotdeb for Debian 7.4 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.27, for Wheezy and Squeeze

Sun, 06 Apr 2014 06:19:46 +0000

On April 3rd 2014, the PHP group has released PHP 5.4.27. 6 bugs were fixed in this release, including CVE-2013-7345. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.11 for Debian Wheezy

Fri, 04 Apr 2014 06:00:52 +0000

On April 2nd 2014, the PHP group has released PHP 5.5.11 :

Several bugs were fixed in this release, some bundled libraries updated and a security issue has been fixed : CVE-2013-7345. We recommand all PHP 5.5 users to upgrade to this version.

As a consequence, PHP 5.5.11 packages are now available on Dotdeb for Debian 7.4 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

About the "mysql_connect(): Headers and client library minor version mismatch" warning

Thu, 03 Apr 2014 23:54:20 +0000

After having MySQL 5.6.17 published, some users complained about a warning thrown by their PHP applications :

PHP Warning: mysql_connect(): Headers and client library minor version mismatch. Headers:50535 Library:50617

In fact, this could happen with any application linked to libmysqlclient18 in a certain version ( php5-mysql from Dotdeb is linked to the 5.5.35 version from the stock Debian distribution) when connecting to a MySQL server in another version (5.6.17 in our case). The warning is thrown by libmysqlclient18 itself. And this is just a warning, there is no reason why any bad behavior would happen in that case.

PHP 5.4.26, for Wheezy and Squeeze

Fri, 07 Mar 2014 11:05:08 +0000

On March 7th 2014, the PHP group has released PHP 5.4.26. 5 bugs were fixed in this release, including CVE-2014-1943. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.10, for Debian 7.0 "Wheezy"

Thu, 06 Mar 2014 21:10:59 +0000

On March 6th 2014, the PHP group has released PHP 5.5.10. Several bugs were fixed in this release, including security issues related to CVEs. CVE-2014-1943, CVE-2014-2270 and CVE-2013-7327 have been addressed in this release. All PHP 5.5 users should upgrade to this version.

As a consequence, PHP 5.5.10 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.25, for Wheezy and Squeeze

Mon, 10 Feb 2014 07:27:34 +0000

On February 6th 2014, the PHP group has released PHP 5.4.25. 5 bugs were fixed, all PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

PHP 5.5.9 for Debian 7.0 "Whezzy"

Mon, 10 Feb 2014 03:58:18 +0000

On February 5th 2014, the PHP group has released PHP 5.5.9. This release fixes several bugs against PHP 5.5.8.

As a consequence, PHP 5.5.9 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

And don’t forget: if you find Dotdeb useful, you may want to show your support.

PHP 5.4.24, for Wheezy and Squeeze

Mon, 13 Jan 2014 03:33:02 +0000

On January 10th 2014, the PHP group has released PHP 5.4.24. About 14 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

PHP 5.5.8, for Debian 7.0 "Wheezy"

Sun, 12 Jan 2014 08:02:30 +0000

On January 10th 2014, the PHP group has released PHP 5.5.8. This release fixes about 20 bugs against PHP 5.5.7 components.

As a consequence, PHP 5.5.8 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Last but not least, if you find Dotdeb useful, you may want to show your support.

PHP 5.5.7, for Debian 7.0 "Wheezy"

Sun, 15 Dec 2013 21:53:08 +0000

On December 12th 2013, the PHP group has released PHP 5.5.7. This release fixes some bugs against PHP 5.5.6 and it also includes a fix for CVE-2013-6420 in OpenSSL extension. All users are strongly encouraged to upgrade.

As a consequence, PHP 5.5.7 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.23, for Wheezy and Squeeze

Sat, 14 Dec 2013 02:39:53 +0000

On December 12th 2013, the PHP group has released PHP 5.4.23. About 10 bugs were fixed, including a security issue in OpenSSL module ( CVE-2013-6420). All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.3.28 for Squeeze

Fri, 13 Dec 2013 15:55:06 +0000

On December 12th 2013, the PHP group has released PHP 5.3.28.

The PHP development team announces the immediate availability of PHP 5.3.28. This release fixes two security issues in OpenSSL module in PHP 5.3 - CVE-2013-4073 and CVE-2013-6420. All PHP 5.3 users are encouraged to upgrade to PHP 5.3.28 or latest versions of PHP 5.4 or PHP 5.5.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze”, on both amd64 and i386 architectures.

PHP 5.4.22, for Wheezy and Squeeze

Mon, 02 Dec 2013 01:46:34 +0000

On November 14th 2013, the PHP group has released PHP 5.4.22. About 10 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Please note that Opcache ( php5-zendopcache) and APCu ( php5-apcu) have been packaged to ease your migration to PHP 5.5.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.6, for Debian 7.0 "Wheezy"

Tue, 19 Nov 2013 02:55:12 +0000

On November 14th 2013, the PHP group has released PHP 5.5.6. This release fixes some bugs against PHP 5.5.5, and adds some performance improvements.

As a consequence, PHP 5.5.6 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Last but not least, if you find Dotdeb useful, you may want to show your support.

PHP 5.5.5, for Debian 7.0 "Wheezy"

Mon, 04 Nov 2013 04:27:56 +0000

On October 16th 2013, the PHP group has released PHP 5.5.5. This release fixes about twenty bugs against PHP 5.5.4, some of them regarding the build system. All PHP users are encouraged to upgrade to this new version.

As a consequence, PHP 5.5.5 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures. And good news, Xcache is back with the php5-xcache package!

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.21, for Wheezy and Squeeze

Sun, 03 Nov 2013 19:01:21 +0000

On October 17th 2013, the PHP group has released PHP 5.4.21. About 10 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

PHP 5.5.4, for Debian 7.0 "Wheezy"

Sun, 22 Sep 2013 21:08:27 +0000

On September 19th 2013, the PHP group has released PHP 5.5.4. This release fixes several bugs against PHP 5.5.3. All PHP users are encouraged to upgrade to this new version.

As a consequence, PHP 5.5.4 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.20, for Wheezy and Squeeze

Sun, 22 Sep 2013 02:55:33 +0000

On September 19th 2013, the PHP group has released PHP 5.4.20. About 30 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you find Dotdeb useful, feel free to show your support.

PHP 5.5.3, for Debian 7.0 "Wheezy"

Thu, 29 Aug 2013 22:10:28 +0000

On August 22nd 2013, the PHP group has released PHP 5.5.3. Since the previously-packaged PHP 5.5.1 version, about 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248) and session fixation problem (CVE-2011-4718).

As a consequence, PHP 5.5.3 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures, with the following changes :

each SAPI (apache2, apache2filter, CLI, CGI, FPM, embed) has now its own /etc/php5/SAPI/conf.d/ subdirectory, not just a symlink to a common one, so it can have its own list of activated modules (it involved some more tests, so sorry for the delay),
the php5-mongo package is now available, allowing you interacting with MongoDB servers,
the php5-fpm init script now reports syntax errors with full error messages.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

PHP 5.4.19, for Wheezy and Squeeze

Tue, 27 Aug 2013 04:50:59 +0000

On August 22nd 2013, the PHP group has released PHP 5.4.19. It fixes a bug in the patch for CVE-2013-4248 in OpenSSL module. All PHP users are encouraged to upgrade to PHP 5.4.19.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.18, for Wheezy and Squeeze

Wed, 21 Aug 2013 17:56:40 +0000

On August 15th 2013, the PHP group has released PHP 5.4.18.

About 30 bugs were fixed, including security issues CVE-2013-4113 and CVE-2013-4248. All users of PHP are encouraged to upgrade to this release.

On the Dotdeb side,

the php5-mongo package is now available, allowing you interacting with MongoDB servers,
the php5-fpm init script now reports syntax errors with full error messages.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.5.1 for Debian 7.0 "Wheezy"

Sat, 03 Aug 2013 23:36:33 +0000

On July 18th 2013, the PHP group has released PHP 5.5.1. About 20 bugs were fixed including a security fix in the XML parser (Bug #65236).

As a consequence, PHP 5.5.1 packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Last but not least, if you like Dotdeb, feel free to show your support.

PHP 5.3.27 for Squeeze

Thu, 25 Jul 2013 21:59:04 +0000

On July 11th 2013, the PHP group has released PHP 5.3.27.

The PHP development team announces the immediate availability of PHP 5.3.27. About 10 bugs were fixed, including a security fix in the XML parser (Bug #65236).

Please Note: This will be the last regular release of the PHP 5.3 series. All users of PHP are encouraged to upgrade to PHP 5.4 or PHP 5.5. The PHP 5.3 series will receive only security fixes for the next year.

PHP 5.4.17, for Wheezy and Squeeze

Sat, 06 Jul 2013 19:17:09 +0000

On July 4th 2013, the PHP group has released PHP 5.4.17.

About 20 bugs were fixed. All users of PHP are encouraged to upgrade to this release.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you like Dotdeb, feel free to show your support.

PHP 5.5.0 is out and available for Debian 7.0 "Wheezy"

Thu, 20 Jun 2013 19:06:44 +0000

On June 20th 2013, the PHP group has released the first stable version of PHP 5.5.

The key features of PHP 5.5.0 include:

Added generators and coroutines.
Added “finally” keyword.
Added simplified password hashing API.
Added support for constant array/string dereferencing.
Added Class Name Resolution As Scalar Via “class” Keyword
Added support for using empty() on the result of function calls and other expressions
Added support for non-scalar Iterator keys in foreach
Added support for list in foreach
Added Zend Opcache extension and enable building it by default.
The GD library has been upgraded to version 2.1 adding new functions and improve existing functionality.
A lot more improvements and fixes

Changes that affect compatibility:

Preview : PHP 5.5.0 RC3 for Debian 7.0 "Wheezy"

Sun, 16 Jun 2013 20:43:26 +0000

If everything goes well, PHP 5.5.0 will be available later this month. This major release brings better overall performance and a lot of new features.

On June 6th 2013, the PHP group has released the third release candidate of PHP 5.5.0. As a consequence, I’m proud to announce that the corresponding packages are now available on Dotdeb for Debian 7.0 “Wheezy”, on both amd64 and i386 architectures.

To upgrade to PHP 5.5.0-RC3, just add these two lines to your sources.list :

PHP 5.3.26 for Squeeze

Sun, 09 Jun 2013 04:46:22 +0000

On June 6th 2013, the PHP group has released PHP 5.3.26.

These releases fix about 15 bugs, including CVE-2013-2110. All users of PHP are encouraged to upgrade to PHP 5.4.16.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze”, on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

And if you like Dotdeb, feel free to show your support.

PHP 5.4.16 for Wheezy and Squeeze

Sun, 09 Jun 2013 01:49:16 +0000

On June 6th 2013, the PHP group has released PHP 5.4.16.

These releases fix about 15 bugs, including CVE-2013-2110. All users of PHP are encouraged to upgrade to PHP 5.4.16.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Please note that php5-readline is now a separate package and that php5-pinba is back.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.15 & PHP 5.3.25 / for Wheezy & Squeeze

Sun, 12 May 2013 08:21:54 +0000

On May 9th 2013, the PHP group has released PHP 5.4.15 and PHP 5.3.25.

These releases fix about 10 bugs aswell as upgrading the bundled libmagic library. All users of PHP are encouraged to upgrade to PHP 5.4.15.

The corresponding packages are now available on Dotdeb :

for Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze”,
on both amd64 and i386 architectures.

Please note that the php5-ffmpeg and php5-pinba packages for PHP 5.4 are missing on Wheezy. They should appear in the next few days, after their source code has been made compatible with Debian’s multi-arch scheme.

PHP 5.3.24

Mon, 22 Apr 2013 04:44:39 +0000

On April 11th 2013, the PHP group has released PHP 5.3.24.

These releases fix about 10 bugs aswell as upgrading the bundled PCRE library. All users of PHP are encouraged to upgrade to PHP 5.4.14.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes. As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.14

Sun, 21 Apr 2013 21:12:00 +0000

On April 11th 2013, the PHP group has released PHP 5.4.14.

These releases fix about 10 bugs aswell as upgrading the bundled PCRE library. All users of PHP are encouraged to upgrade to PHP 5.4.14.

PHP 5.3.23

Tue, 26 Mar 2013 11:14:48 +0000

On March 14th 2013, the PHP group has released PHP 5.3.23.

These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :

php5-xdebug as been upgraded to version 2.2.2
php5-apc fixes a bug in relative path search when apc.stats = 0

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.13

Thu, 21 Mar 2013 22:45:10 +0000

On March 14th 2013, the PHP group has released PHP 5.4.13.

These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :

php5-ffmpeg is now compatible with PHP 5.4
php5-apc fixes a bug in relative path search when apc.stats = 0

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.3.22

Sun, 03 Mar 2013 12:05:37 +0000

On february 21st 2013, the PHP group has released PHP 5.3.22.

This releases fix about 10 bugs. Beside that, all users of PHP are encouraged to upgrade to PHP 5.4.12

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.12

Fri, 01 Mar 2013 14:03:31 +0000

On february 21st 2013, the PHP group has released PHP 5.4.12.

This releases fix about 10 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.12

Note : PHP 5.3.22 packages will be available at the end of this week.

PHP 5.3.21

Sun, 27 Jan 2013 14:23:26 +0000

On january 17th 2013, the PHP group has released PHP 5.3.21 :

These releases fix about 10 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures, with these changes :

APC has been upgraded to 3.1.14
Xcache has been upgraded to 3.0.1 (now compatible with Ioncube)

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.11

Thu, 24 Jan 2013 22:25:29 +0000

On january 17th 2013, the PHP group has released PHP 5.4.11 :

These releases fix about 10 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures, with these changes :

APC has been upgraded to 3.1.14
Xcache has been upgraded to 3.0.1 (now compatible with Ioncube)
mysqlnd headers are now included in php5-dev to allow mysqlnd plugins to build

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.10 and PHP 5.3.20

Sun, 30 Dec 2012 18:59:50 +0000

On december 20th 2012, the PHP group has released PHP 5.4.10 and PHP 5.3.20 :

These releases fix about 15 bugs. Please note that the PHP 5.3 series will enter an end of life cycle and receive only critical fixes as of March 2013. All users of PHP are encouraged to upgrade to PHP 5.4.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

PHP 5.4.9 and PHP 5.3.19

Mon, 26 Nov 2012 05:01:10 +0000

On november 22nd 2012, the PHP group has released PHP 5.4.9 and PHP 5.3.19, that bring ~15 bug fixes. The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Please also note that Xcache (packaged as php5-xcache) has been upgraded to its 3.0.0 version.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.8 and PHP 5.3.18

Fri, 19 Oct 2012 10:52:12 +0000

On october 18th 2012, the PHP group has released PHP 5.4.8 and PHP 5.3.18, that bring ~20 bug fixes. The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

PHP 5.4.7 and PHP 5.3.17

Sun, 16 Sep 2012 07:31:03 +0000

On september 13th 2012, the PHP group has released PHP 5.4.7 and PHP 5.3.17, that bring ~20 bug fixes.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :

php5-suhosin is not a recommendation from php5-common anymore.
php5-xcache now includes the admin web interface files (closes #10).
php5-apc includes APC 3.1.13 for PHP 5.4, and has been rollbacked to APC 3.1.9 for PHP 5.3 for more stability.

About the PHP-FPM and APC issues, the packages include all that has been committed/released about the many bug reports on these subjects. I’m still watching any activity that would allow me to provide better packages.

How to post useful bug reports

Fri, 24 Aug 2012 20:15:26 +0000

With the latest two PHP updates, some users reported problems with FPM, with APC, etc… It was about segfaults, problematic init scripts, and so on… But all those comments couldn’t really help me to diagnose the problems in an efficient manner.

Here are the pieces of information that you have to provide to help me fixing your problem :

What is your distribution? (disclaimer : only Debian stable is supported)
What is your architecture? amd64 or i386?
Which exact PHP version are you using? 5.4.x or 5.3.x?
Which SAPI are you using? mod_php? CGI? FPM? Embed?
What’s the full content of your /etc/apt/sources.list and /etc/apt/sources.list.d files?
What is the result of dpkg -l 'php*' | grep '^.i' ?
Please provide a textual description of the bug (don’t hesitate to provide some code, the expected result…).
Please provide any modified configuration directive.
Please provide a backtrace, after installing php5-dbg.

Now, some tips to have a stable PHP stack :

PHP 5.4.6

Sun, 19 Aug 2012 11:03:46 +0000

On august 16th 2012, the PHP group has released PHP 5.4.6, that brings 20 minor bug fixes.

PHP 5.3.16

Sat, 18 Aug 2012 08:35:10 +0000

On august 16th 2012, the PHP group has released PHP 5.3.16, that brings 20 minor bug fixes.

PHP 5.4.5 and PHP 5.3.15

Mon, 23 Jul 2012 14:25:59 +0000

On july 19th 2012, the PHP group has released PHP 5.4.5 and PHP 5.3.15, that bring over 30 bug fixes, including a fix for a security related overflow issue in the stream implementation.

The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures (see the installation instructions). Please also note that the php5-xhprof package is now available for PHP 5.4.

PHP 5.3.14

Thu, 21 Jun 2012 05:21:26 +0000

On june 14th 2012, the PHP group has released PHP 5.3.14, that brings over 30 bug fixes, some of which are security related : A weakness in the DES implementation of crypt and a heap overflow issue in the phar extension. Please also note that the use of php://fd streams is now restricted to the CLI SAPI ( php5-cli).

Packages of PHP 5.3.14 are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Security : PHP 5.4.3 and PHP 5.3.13

Tue, 08 May 2012 22:52:22 +0000

PHP 5.4.3 and PHP 5.3.13 have been released by the PHP development team to fix some critical security issues :

Source code disclosure with a trivial request (CVE-2012-1823 and CVE-2012-2311) - PHP 5.4 and 5.3 are vulnerable
buffer overflow in apache_request_headers() (CVE-2012-2329) - only PHP 5.4 is vulnerable.

If you’re using the CGI flavor of PHP, upgrading is highly recommended. You can see more info on PHP’s website and on this useful blog post.

PHP 5.4.1

Mon, 30 Apr 2012 21:17:38 +0000

On april 26th 2012, the PHP group has released PHP 5.4.1 too, that brings over 60 bug fixes, some of which are security related :

Security Enhancements and Fixes in PHP 5.4.1:

Fixed bug #54374 (Insufficient validating of upload name leading to corrupted $_FILES indices). (CVE-2012-1172).

Add open_basedir checks to readline_write_history and readline_read_history.

Key enhancements in PHP 5.4.1 include:

Added debug info handler to DOM objects.

Fixed bug #61172 (Add Apache 2.4 support).

Packages of PHP 5.4.1 and of all its related extensions are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. Please note that :

PHP 5.3.11

Mon, 30 Apr 2012 11:57:34 +0000

On april 26th 2012, the PHP group has released PHP 5.3.11, that brings over 60 bug fixes, some of which are security related :

Security Enhancements and Fixes in PHP 5.3.11:

Fixed bug #54374 (Insufficient validating of upload name leading to corrupted $_FILES indices). (CVE-2012-1172).

Add open_basedir checks to readline_write_history and readline_read_history.

Fixed bug #61043 (Regression in magic_quotes_gpc fix for CVE-2012-0831).

Key enhancements in PHP 5.3.11 include:

Added debug info handler to DOM objects.

Fixed bug #61172 (Add Apache 2.4 support).

Packages of PHP 5.3.11 are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures.

Packages of PHP 5.4.0 have been updated

Tue, 13 Mar 2012 11:43:04 +0000

Now that PHP 5.4.0 packages have been published as preview, issues have to be fixed. That’s why these packages have been updated with the following changes :

gzopen64() has been wrongly introduced on the i386 architecture, instead of the regular gzopen(). It is now fixed.
PCRE functions did not support Unicode. That’s ok now.
APC has been packaged as php5-apc against its svn/trunk version. It should now work well. Still waiting for an official release.
Xdebug should appear very soon is now available in 2.2.0RC1 version.

Thanks for your useful reports.

PHP 5.4.0 preview packages

Thu, 01 Mar 2012 22:46:12 +0000

After many months of active development, PHP 5.4.0 is now generally available :

The PHP development team is proud to announce the immediate release of PHP 5.4.0. This release is a major improvement in the 5.x series, which includes a large number of new features and bug fixes. Some of the key new features include: traits, a shortened array syntax, a built-in webserver for testing purposes and more. PHP 5.4.0 significantly improves performance, memory footprint and fixes over 100 bugs. For users upgrading from PHP 5.3 there is a migration guide available here, detailing the changes between those releases and PHP 5.4.0. Further details about the PHP 5.4.0 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

Security update : PHP 5.3.10

Fri, 03 Feb 2012 01:25:52 +0000

A few hours ago, PHP 5.3.10 has been released by the PHP Group. It’s an important security update for PHP 5.3.9 users : Stefan Esser discovered a remotely exploitable bug, introduced with PHP 5.3.9’s max_input_vars directive (CVE-2012-0830). You really should upgrade as soon as possible.

Packages of PHP 5.3.10 are now available for :

both Debian 6.0 “Squeeze” and Debian 5.0 “Lenny”,
both amd64 and i386 architectures.

(Lenny packages will be available on php53.dotdeb.org during two weeks before being migrated to archives.dotdeb.org because of the end of Lenny’s security support)

Advisory : buffer overflow in php5-suhosin

Tue, 24 Jan 2012 15:02:26 +0000

A few days ago, Stefan Esser discovered a buffer overflow in the “transparent cookie encryption stack” of the Suhosin extension. Here is the full advisory.

If you previously installed the php5-suhosin package, you should upgrade to its fixed new version (0.9.33) by running :

apt-get update
apt-get install --reinstall php5-suhosin

PHP 5.3.9

Thu, 12 Jan 2012 17:50:15 +0000

On january 10th 2012, the PHP group has released PHP 5.3.9, that brings over 90 bug fixes, some of which are security related :

Security Enhancements and Fixes in PHP 5.3.9:

Added max_input_vars directive to prevent attacks based on hash collisions. (CVE-2011-4885)

Fixed bug #60150 (Integer overflow during the parsing of invalid exif header). (CVE-2011-4566)

Key enhancements in PHP 5.3.9 include:

Fixed bug #55475 (is_a() triggers autoloader, new optional 3rd argument to is_a and is_subclass_of).

Fixed bug #55609 (mysqlnd cannot be built shared)

Many changes to the FPM SAPI module

PHP 5.3.9 is now available on Dotdeb for :

PHP 5.3.8 is available

Tue, 30 Aug 2011 14:03:23 +0000

On August 18th, the PHP Group released PHP 5.3.7 with many security enhancements and many bugfixes. Sadly, it suffered from an issue with the crypt() function , forcing the PHP Group to publish PHP 5.3.8 (that fixes a mysqlnd issue with SSL connections too).

I’m glad too announce that PHP 5.3.8 packages are now available on Dotdeb for both amd64 and i386 architectures :

for Debian 6.0 Squeeze : on the main Dotdeb repository
for Debian 5.0 “Lenny” : on php53.dotdeb.org

Ugrading to PHP 5.3.8 is strongly recommended, but please read the Changelog before.

PHP 5.3.6 is available

Sat, 09 Apr 2011 16:07:34 +0000

On March 17th, the PHP Group released PHP 5.3.6. This maintainance release, that focuses on security, is now available on Dotdeb for Debian 6.0 “Squeeze” in amd64 and i386 flavours.

The compatibility with the official Debian packages has been improved and you (especially the FPM users) should really take care of some important changes that I made :

the intl extension is now built in a separate package : php5-intl
the FPM binary is now /usr/sbin/php5-fpm (previously /usr/bin/php5-fpm)
the FPM configuration file is now /etc/php5/fpm/php-fpm.conf (previously /etc/php5/fpm/php5-fpm.conf)
the FPM pools have to be moved to /etc/php5/fpm/pool.d/ (previously /etc/php5/fpm/pools/)

As usual, please read the Changelog before upgrading.

Let's monitor your PHP applications with Pinba

Mon, 31 Jan 2011 09:20:23 +0000

Do you know Pinba? It’s a great tool and you really should use it on your LAMP platform.

Pinba is a realtime monitoring/statistics server for PHP using MySQL as a read-only interface.

It accumulates and processes data sent over UDP by multiple PHP processes and displays statistics in a nice human-readable form of simple " reports", also providing read-only interface to the raw data in order to make possible generation of more sophisticated reports and stats.

With Pinba extension users also can measure particular parts of the code using timers with arbitrary tags.

Pinba is not a debugging tool in a common sense, since you’re not supposed to do debugging on production servers, but its main goal is to help developers to monitor performance of PHP scripts, locate bottlenecks in realtime and direct developers’ attention to the code that really needs it.

PHP 5.3.5, now for Squeeze

Tue, 11 Jan 2011 14:41:47 +0000

I just released PHP 5.3.5 packages for Debian 6.0 (a.k.a “Squeeze”), with some changes against the Lenny’s ones :

the packaging process has been improved : dependencies were cleaned up, PHP tests are now displayed, libtool 2.2 is now supported (thanks to the Debian team for their precious work)
3 new useful extensions have been packaged : gearman, phpredis and xhprof (without its interface files)

With these new packages, Dotdeb’s support for Squeeze is still experimental, but almost complete. Some more packages could be added in a near future :

You really should upgrade to PHP 5.3.5 or 5.2.17

Fri, 07 Jan 2011 10:53:42 +0000

A few days after releasing PHP 5.3.4 and PHP 5.2.16, the PHP group announced an important security update with PHP 5.3.5 and PHP 5.2.17 :

This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers.

The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from the command line.

All users of PHP are strongly advised to update to these versions immediately.

PHP 5.3.4 is available

Mon, 03 Jan 2011 21:10:19 +0000

After PHP 5.3.4 has been released by the PHP Group and after the corresponding Suhosin patch has been published by Stefan Esser, the PHP 5.3.4 packages for Debian “Lenny” 5.0 are now available on Dotdeb. Thanks for your patience.

Follow these instructions if you’re installing them for the first time. And as usual, please read the full announcement and the Changelog before upgrading.

Happy new year!

PHP 5.2 last update : 5.2.16

Mon, 03 Jan 2011 19:14:22 +0000

PHP 5.2.16 has been released by the PHP Group a few days after PHP 5.2.15 (fixing an open_basedir issue). It is now available on Dotdeb for your Debian “Lenny” servers.

This maintainance release marks the end of support for PHP 5.2. You are strongly encouraged to upgrade to PHP 5.3 (read this migration guide).

Please read PHP 5.2.15 and 5.2.16 release announcements and the full Changelog before upgrading.

PHP 5.3.3 packages get a minor update

Fri, 08 Oct 2010 09:06:23 +0000

The PHP 5.3.3 packages for Debian 5.0 “Lenny” (amd64/i386) have been updated. Here are the changes :

php5-fpm should now work out-of-the-box. Some unset parameters prevented its launch. Thanks to Daniel Hahler for the patch.
PECL/APC has been upgraded to 3.1.4
PECL/memcache has been upgraded to 3.0.5

PHP 5.2.14 is available too

Sun, 25 Jul 2010 13:11:24 +0000

On july, 22nd, the PHP Group released PHP 5.2.14 :

The PHP development team would like to announce the immediate availability of PHP 5.2.14. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related.

This release marks the end of the active support for PHP 5.2. Following this release the PHP 5.2 series will receive no further active bug maintenance. Security fixes for PHP 5.2 might be published on a case by cases basis. All users of PHP 5.2 are encouraged to upgrade to PHP 5.3.

PHP 5.3.3 packages are available

Sun, 25 Jul 2010 11:03:09 +0000

On july, 22nd, the PHP Group released PHP 5.3.3 :

The PHP development team would like to announce the immediate availability of PHP 5.3.3. This release focuses on improving the stability and security of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users are encouraged to upgrade to this release.

The packages for Debian “Lenny” are now available on Dotdeb on the usual repository.

May is the month of PHP security

Tue, 04 May 2010 12:26:21 +0000

According to Stefan Esser, author of the Suhosin patch, May 2010 will be the “Month of PHP Security” :

This initiative continues the effort of Hardened-PHP’s Month of PHP Bugs in 2007 to improve the security of PHP and the PHP ecosystem by disclosing vulnerabilities in PHP and PHP applications on the one hand and on the other hand by publishing articles and tools that help PHP application developers to develop more secure PHP applications.

PHP 5.3.2 and PHP 5.2.13 get an update

Wed, 21 Apr 2010 09:38:58 +0000

New packages of PHP 5.3.1 and PHP 5.2.13 has been uploaded to fix some annoying bugs :

filter_var now validates correctly the hostnames that include ‘-’ ( bug #51192)
the GD bundled library has been patched to fix some TrueType issues ( bug #51207, …)

In addition, PHP 5.3.2 now restarts softly, without any problem (thanks to Daniel Hahler).

PHP 5.3.2 is available too!

Mon, 08 Mar 2010 22:29:56 +0000

A few days ago, the PHP Group released PHP 5.3.2. It fixes severe security issues and some other bugs :

The PHP development team is proud to announce the immediate release of PHP 5.3.2. This is a maintenance release in the 5.3 series, which includes a large number of bug fixes.

Security Enhancements and Fixes in PHP 5.3.2:

Improved LCG entropy. (Rasmus, Samy Kamkar)

Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)

Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

(…)

PHP 5.2.13 is available

Sun, 07 Mar 2010 12:21:41 +0000

A few days ago, the PHP Group released PHP 5.2.13. It fixes severe security issues and some other bugs :

The PHP development team would like to announce the immediate availability of PHP 5.2.13. This release focuses on improving the stability of the PHP 5.2.x branch with over 40 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.2.13:

Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)

Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

Improved LCG entropy. (Rasmus, Samy Kamkar)

(…)

PHP 5.2.12 packages are here!

Mon, 11 Jan 2010 21:49:56 +0000

On December 17th 2009, the PHP Group released PHP 5.2.12 :

The PHP development team would like to announce the immediate availability of PHP 5.2.12. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.2.12:

Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus)

Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)

Added “max_file_uploads” INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia)

Added protection for $_SESSION from interrupt corruption and improved “session.save_path” check, identified by Stefan Esser. (CVE-2009-4143, Stas)

Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)

(Please read the full announcement for more details)

The PHP 5.3.1 packages have been updated

Sun, 06 Dec 2009 10:14:09 +0000

The PHP 5.3.1 packages for Debian “Lenny” have been updated to fix :

the php5-fpm binary
the /etc/init.d/php5-fpm script

All should work fine now.

PHP 5.3.1 packages for Debian "Lenny" : they're here!

Mon, 30 Nov 2009 08:58:33 +0000

The official announcement

A few days ago, the PHP Group released PHP 5.3.1 :

The PHP development team would like to announce the immediate availability of PHP 5.3.1. This release focuses on improving the stability of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users of PHP are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.3.1:

Added “max_file_uploads” INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion.

Added missing sanity checks around exif processing.

Fixed a safe_mode bypass in tempnam().

Fixed a open_basedir bypass in posix_mkfifo().

Fixed failing safe_mode_include_dir.

Further details about the PHP 5.3.1 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

PHP 5.2.11 packages are available for Etch and Lenny

Wed, 23 Sep 2009 15:17:42 +0000

PHP 5.2.11 has been published a few days ago by the PHP Group and its packages are now available for Debian Etch and Lenny, amd64 and i386. It fixes a lot of bugs and some security issues :

Fixed certificate validation inside php_openssl_apply_verification_policy. (Ryan Sleevi, Ilia)
Fixed sanity check for the color index in imagecolortransparent(). (Pierre)
Added missing sanity checks around exif processing. (Ilia)
Fixed bug #44683 (popen crashes when an invalid mode is passed). (Pierre)

To avoid the same negative feedbacks as about PHP 5.2.10, a lot of debug and changes has been made :

PHP 5.3.0-final preview packages available for Debian Lenny

Fri, 03 Jul 2009 16:31:11 +0000

The official announce of PHP 5.3.0

Read carefully this announce from PHP.net and its links :

The PHP development team is proud to announce the immediate release of PHP 5.3.0. This release is a major improvement in the 5.X series, which includes a large number of new features and bug fixes.

Some of the key new features include: namespaces, late static binding, closures, optional garbage collection for cyclic references, new extensions (like ext/phar, ext/intl and ext/fileinfo), over 140 bug fixes and much more.

For users upgrading from PHP 5.2 there is a migration guide available here, detailing the changes between those releases and PHP 5.3.0.

Further details about the PHP 5.3.0 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

PHP 5.2.10 packages for Lenny/Etch are now available!

Thu, 25 Jun 2009 04:50:59 +0000

A few days ago, the PHP development team announced the availability of PHP 5.2.10 with many improvements and 100+ bug fixes. Here is the Changelog.

Now that the corresponding Suhosin patch is alive, the PHP 5.2.10 packages are available on Dotdeb :

for Debian Lenny and Etch
for the amd64 and i386 architectures

Upgrading your servers is highly recommanded.

Update : The PHP 5.2.10 packages seem to be buggy under (un)certain conditions : (f)CGI + Suhosin. Then I decided to rollback to 5.2.9 to avoid a flood a users’ requests and to give me time to investigate. If your PHP 5.2.10 does not encounter problems, keep it, you’re lucky

PHP 5.3.0 RC4 available

Mon, 22 Jun 2009 14:32:26 +0000

From PHP.net :

The PHP development team is proud to announce the fourth release candidate of PHP 5.3.0 (PHP 5.3.0RC4). This RC focuses on bug fixes and stability improvements, and we hope only minimal changes are required for the next candidate or final stable releases. PHP 5.3.0 is a newly developed version of PHP featuring long-awaited features like namespaces, late static binding, closures and much more.

Please download and test these release candidates, and report any issues found. A stable release is expected next week . In case of critical issues we will continue producing weekly RCs. Downloads and further information is available at qa.php.net. See also the work in progress 5.3 upgrade guide.

PHP 5.3.0 RC3 packages for Lenny

Tue, 16 Jun 2009 20:05:20 +0000

The third (and probably the last) release candidate of PHP 5.3.0 has been published by the PHP Group a few days ago. Then I updated the preview packages for Debian GNU/Linux 5.0 “Lenny” on amd64 and i386.

To fetch them, just add these temporary entries in your /etc/apt/sources.list and upgrade your boxes :

deb http://php53.dotdeb.org stable all deb-src http://php53.dotdeb.org stable all

Please note that an upgrade guide is being written. You also may want to visit this page.

PHP 5.3.0 RC2 packages for Lenny

Wed, 13 May 2009 13:45:07 +0000

A few days ago, the second release candidate of PHP 5.3.0 has been published by the PHP Group.

I just updated the preview packages for Debian GNU/Linux 5.0 “Lenny” on amd64 and i386. Have fun!

Minor update of the PHP 5.2.9 packages

Thu, 09 Apr 2009 17:14:43 +0000

The PHP 5.2.9 packages for Etch/Lenny amd64/i386 have been updated :

some obsolete ./configure options have been deleted
the sigchild support has been dropped
a memory leak has been fixed

PHP 5.3.0 RC1 packages for Lenny

Tue, 07 Apr 2009 10:32:28 +0000

A few days ago, the first release candidate of PHP 5.3.0 has been published by the PHP Group, providing many improvements :

I just built the packages for Debian GNU/Linux 5.0 “Lenny” on amd64 and i386 and I will maintain them during the whole release cycle (RC2 and so on…).

Please note that they should NOT be installed on production servers : Suhosin and some important patches are not applied, PECL extensions are not available (yet)… They’re here for testing purpose only.

PHP 5.2.9 is packaged (at last)

Tue, 10 Mar 2009 23:06:26 +0000

Sorry for the delay, but I had to come back from winter sports to have a decent Internet connection…

After being published by the PHP Group, PHP 5.2.9 anf its corresponding PECL extensions is now packaged for Lenny/Etch, amd64/i386. It fixes some annoying crashes and one security issue. The next release should be PHP 5.3.0 with some new interesting features ( MySQL native driver, Phar, namespaces…).

Take a look at the official Changelog for more details before doing this recommanded upgrade.

Dotdeb : Debian 5.0 "Lenny" support in progress...

Thu, 26 Feb 2009 22:46:03 +0000

Dotdeb is now providing Debian packages of PHP5, MySQL 5.1 for your Debian Lenny (and still Debian Etch) LAMP servers

PHP 5.2.8 available

Tue, 09 Dec 2008 12:30:31 +0000

PHP 5.2.8 is now available on Dotdeb to fix one major security issue.

PHP 5.2.7 updated because magic_quotes_gpc is broken

Sun, 07 Dec 2008 17:54:36 +0000

Stefan Esser has posted a warning about upgrading PHP to the 5.2.7 release :

(…)a change in the ext/filter extension that by default processes all incoming data, broke the magic_quotes_gpc feature. While magic_quotes_gpc itself is deprecated and it is recommended to not rely on it as protection against SQL injection, it is still used in many legacy applications that become very insecure once it is turned off. And exactly that happens with the upgrade to PHP 5.2.7. The fix for this was already commited to the PHP CVS and PHP 5.2.8 will be released next week.

PHP 5.2.7 available

Fri, 05 Dec 2008 17:55:30 +0000

From PHP.net :

The PHP development team would like to announce the immediateavailability of PHP 5.2.7. This release focuses on improving the stability ofthe PHP 5.2.x branch with over 120 bug fixes, several of which are security related.All users of PHP are encouraged to upgrade to this release. (…) Further details about the PHP 5.2.7 release can be found in the release announcement for 5.2.7, the full list of changes is available in the ChangeLog for PHP 5.

How to package PHP extensions by yourself

Thu, 25 Sep 2008 12:52:56 +0000

I often receive emails telling me that Dotdeb is a great tool, but that some useful packages are missing, such as some PECL extensions. I wish I could maintain many and many packages, but I don’t think it’s a good idea for the Dotdeb’s overall quality and for my free time ;) Sorry for that.

Then, this article will show you how to build packages from your favorite PECL extensions in a strict Debian way, using the dh-make-php package.

How to use PHP5 and PHP4 on the same Apache2 server

Sun, 24 Aug 2008 13:38:57 +0000

Since PHP4 is officially dead, it is now urgent to migrate your applications to PHP5, but it’s not that easy and you’ll have to test them before replacing PHP4 by PHP5 on your server. This article will help you to install both PHP4 and PHP5 on your box and swicth easily between them…

The problem

It is not possible to enable both PHP4 and PHP5 Apache2 modules on the same webserver, it causes shared objects collision. Then, the idea is to enable PHP5 as Apache2 module on one side and PHP4 as CGI on the other side.

PHP 4.4.9 available

Sat, 23 Aug 2008 17:55:48 +0000

On August 7th, the PHP Group has published the last version of PHP4, numbered 4.4.9 :

It continues to improve the security and the stability of the 4.4 branch and all users are strongly encouraged to upgrade to it as soon as possible. This release wraps up all the outstanding patches for the PHP 4.4 series, and is therefore the last PHP 4.4 release.

On August 22nd, Stefan Esser released the appropriate Suhosin patch, allowing me to package PHP 4.4.9 for Debian Etch amd64/i386 (Sarge support is now discontinued).