Release

On December 18th 2014, the PHP group released PHP 5.6.4. Two security-related bugs were fixed in this release, including the fix for CVE-2014-8142. All PHP 5.4 users are encouraged to upgrade to this version. PHP 5.6.4 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. Please also note these points : Regression : php5-memcached lacks JSON support Missing packages : Xcachen Xdebug and Xhprof are missing for now End of support : Spplus won’t be supported anymore. Pinba’s fates hasn’t been decided yet. As a consequence : ...

On November 13th 2014, the PHP group released PHP 5.4.35. 4 security-related bugs were fixed in this release, including the fix for CVE-2014-3710. All PHP 5.4 users are encouraged to upgrade to this version. The corresponding packages are now available on Dotdeb : for Debian 7 “Wheezy” and Debian 6 “Squeeze”, on both amd64 and i386 architectures. The following modules have been packaged too : APC 3.1.13 apcu 4.0.7 ffmpeg 0.6.0 (Squeeze only) gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.5.8 pecl_http 1.7.6 pinba (master) redis 2.2.5 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.2.6 xhprof 0.9.4 zendopcache 7.0.3 As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

On November 13th 2014, the PHP group released PHP 5.5.19. This release fixes several bugs and one CVE in the fileinfo extension. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.19 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. They include a fix for regressions in the FPM SAPI (See 1, 2 and 3) that is present in the upstream version of PHP 5.5.19. ...

On November 13th 2014, the PHP group released PHP 5.6.3. This release fixes several bugs and one CVE in the fileinfo extension. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.3 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. They include a fix for regressions in the FPM SAPI (See 1, 2 and 3) that is present in the upstream version of PHP 5.6.3. ...

MySQL 5.6.21 has been released on September 23rd, 2014, fixing 24 security issues and various bugs affecting previous versions. Please read the full Changelog fore more details. The corresponding packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures. Note : Some people reported having difficulties upgrading from 5.6.19 to 5.6.21. If this is your case, prefer using apt-get dist-upgrade (or equivalent) instead of apt-get upgrade.

On October 16th 2014, the PHP group released PHP 5.4.34. 6 security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. Also, a fix for OpenSSL which produced regressions was reverted. All PHP 5.4 users are encouraged to upgrade to this version. The corresponding packages are now available on Dotdeb : for Debian 7 “Wheezy” and Debian 6 “Squeeze”, on both amd64 and i386 architectures. The following modules have been packaged too : ...

On October 16th 2014, the PHP group released PHP 5.5.18. Several bugs were fixed in this release. A regression in OpenSSL introduced in PHP 5.5.17 has also been addressed in this release. PHP 5.5.18 also fixes 4 CVEs in different components. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.18 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. The following modules have been packaged too : ...

On October 16th 2014, the PHP group released PHP 5.6.2. Four security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.2 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. Please also note these points : Regression : php5-memcached lacks JSON support Missing packages : Xcachen Xdebug and Xhprof are missing for now End of support : Spplus won’t be supported anymore. Pinba’s fates hasn’t been decided yet. As a consequence : ...

On October 2nd 2014, the PHP group released PHP 5.6.1. Several bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.1 packages are now available on Dotdeb for Debian 7.6 “Wheezy”, on both amd64 and i386 architectures. Please also note these points : Regression : php5-memcached lacks JSON support Missing packages : Xdebug and Xhprof are missing for now End of support : Spplus won’t be supported anymore. Xcache’s and Pinba’s fates haven’t been decided yet As a consequence : ...

Nginx 1.6.2 has been released on September 16th 2014, with the following changes : Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple “server” blocks ( CVE-2014-3616). Thanks to Antoine Delignat-Lavaud. Bugfix: requests might hang if resolver was used and a DNS server returned a malformed response; the bug had appeared in 1.5.8. Bugfix: requests might hang if resolver was used and a timeout occurred during a DNS request. As a consequence, packages of Nginx 1.6.2 are now available for both Debian 7 “Wheezy” and Debian 6 “Squeeze” (amd64/i386). ...