Php

On September 4th 2015, the PHP group published the second release candidate of the upcoming new major branch, PHP 7 : PHP 7.0.0 RC 2 contains fixes for 28 reported bugs, 7 of which are security related, and altogether over 250 commits with various improvements. PHP 7.0.0 comes with new version of the Zend Engine with features such as (incomplete list): Improved performance: PHP 7 is up to twice as fast as PHP 5.6 Consistent 64-bit support Many fatal errors are now Exceptions Removal of old and unsupported SAPIs and extensions The null coalescing operator (??) Combined comparison Operator (< =>) Return Type Declarations Scalar Type Declarations Anonymous Classes For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. ...

On September 4th 2015, the PHP group released PHP 5.4.45. Ten security-related issues were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version. (…) Please note that according to the PHP version support timelines, PHP 5.4.45 is the last scheduled release of PHP 5.4 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.4 branch. If your PHP installation is based on PHP 5.4, it may be a good time to start making the plans for the upgrade to PHP 5.5 or PHP 5.6. ...

On September 4th 2015, the PHP group released PHP 5.5.29. This is a security release. Many security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.29 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures. The following modules have been packaged too : apcu 4.0.7 gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.10 pecl_http 1.7.6 pinba (master) redis 2.2.7 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.2 xhprof 0.9.4 Please read the Changelog before upgrading.

On September 4th 2015, the PHP group released PHP 5.6.13. 11 security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.13 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions. Note : php5-memcached still lacks JSON support.

On August 6th 2015, the PHP group released PHP 5.5.28. 12 security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.28 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures. The following modules have been packaged too : apcu 4.0.7 gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.10 pecl_http 1.7.6 pinba (master) redis 2.2.7 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.2 xhprof 0.9.4 Please read the Changelog before upgrading.

On August 6th 2015, the PHP group released PHP 5.6.12. 12 security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.12 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions. Note : php5-memcached still lacks JSON support.

On July 9th 2015, the PHP group released PHP 5.4.43. Five security-related issues in PHP were fixed in this release, including CVE-2015-3152. All PHP 5.4 users are encouraged to upgrade to this version. The corresponding packages are now available on Dotdeb : for Debian 7 “Wheezy” and Debian 6 “Squeeze”, on both amd64 and i386 architectures. The following modules have been packaged too : APC 3.1.13 apcu 4.0.7 ffmpeg 0.6.0 (Squeeze only) gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.10 pecl_http 1.7.6 pinba (master) redis 2.2.7 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.3 xhprof 0.9.4 zendopcache 7.0.5 As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

On July 10th 2015, the PHP group released PHP 5.5.27. Several bugs were fixed in this release as well as CVE-2015-3152. All PHP 5.5 users are encouraged to upgrade to this version. (…) this PHP 5.5 version is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of one year. PHP 5.5 users that need further bugfixes are encouraged to upgrade to PHP 5.6. ...

On July 10th 2015, the PHP group released PHP 5.6.11. Five security-related issues in PHP were fixed in this release, including CVE-2015-3152. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.11 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions. Note : php5-memcached still lacks JSON support.

On June 11th 2015, the PHP group released PHP 5.4.42. Six security-related issues in PHP were fixed in this release, as well as several security issues in bundled sqlite library (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416). All PHP 5.4 users are encouraged to upgrade to this version. The corresponding packages are now available on Dotdeb : for Debian 7 “Wheezy” and Debian 6 “Squeeze”, on both amd64 and i386 architectures. The following modules have been packaged too : ...