Security

No new packages have been published here for years. I still kept the repositories online, because pulling them would have broken every old server that still has Dotdeb in its sources.list. The PHP2Shell vulnerabilities changed my mind: Every PHP package served from Dotdeb is affected, none of them will ever be fixed, and installing them today means putting a remotely exploitable server on the Internet. At this point, they’re basically malware, and it would not be responsible to keep serving them. ...

On January 10th 2019, the PHP group released PHP 5.6.40. The PHP development team announces the immediate availability of PHP 5.6.40. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. Please note that according to the PHP version support timelines, PHP 5.6.40 is the last scheduled release of PHP 5.6 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.6 branch. If your PHP installation is based on PHP 5.6, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3. ...

On December 6th 2018, the PHP group published PHP 7.0.33. The PHP development team announces the immediate availability of PHP 7.0.33. Five security-related issues were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version. Please note that according to the PHP version support timelines, PHP 7.0.33 is the last scheduled release of PHP 7.0 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 7.0 branch. If your PHP installation is based on PHP 7.0, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3. ...

On December 6th 2018, the PHP group released PHP 5.6.39. The PHP development team announces the immediate availability of PHP 5.6.39. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. Please note that according to the PHP version support timelines, PHP 5.6.39 is the last scheduled release of PHP 5.6 branch. There may be additional release if we discover important security issues that warrant it, otherwise this release will be the final one in the PHP 5.6 branch. If your PHP installation is based on PHP 5.6, it may be a good time to start making the plans for the upgrade to PHP 7.1, PHP 7.2 or PHP 7.3. ...

Nginx 1.14 has been released on April 17th 2018, incorporating new features and bug fixes from the 1.13.x mainline branch - including the mirror module, HTTP/2 push, the gRPC proxy module, and more.. Nginx 1.14.1 has then been released on November 6th, 2018, with fixes for vulnerabilities in HTTP/2 (CVE-2018-16843, CVE-2018-16844) and the MP4 module (CVE-2018-16845).. As a consequence, packages of Nginx 1.14.1 are now available for Debian 8 “Jessie” (with or without full HTTP2 support - see the instructions), on both amd64 and i386 architectures. Associated modules have been updated too. Please note that PageSpeed is now only supported on amd64, not i386. ...

On September 13th 2018, the PHP group published PHP 7.0.32. This is a security release. One security bug has been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version. Packages of PHP 7.0.32 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug. Important reminder: Jessie entered its “Long Term Support” phase in June 2018 and PHP 7.0 will reach its “End Of Life” in December of this year. Please consider upgrading to more recent versions of both Debian and PHP.

On September 13th 2018, the PHP group released PHP 5.6.38. This is a security release. One security bug has been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.38 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions. Important reminder: Wheezy is “End Of Life” since May 2018 and PHP 5.6 will at the end of this year. These packages are provided for legacy servers. Please consider upgrading to more recent versions of both Debian and PHP.

On July 19th 2018, the PHP group published PHP 7.0.31. This is a security release. Several security bugs have been fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version. Packages of PHP 7.0.31 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug. Important reminder: Jessie entered its “Long Term Support” phase in June 2018 and PHP 7.0 will reach its “End Of Life” in December of this year. Please consider upgrading to more recent versions of both Debian and PHP.

On July 20th 2018, the PHP group released PHP 5.6.37. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.37 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions. Important reminder: Wheezy is “End Of Life” since May 2018 and PHP 5.6 will at the end of this year. These packages are provided for legacy servers. Please consider upgrading to more recent versions of both Debian and PHP.

On April 26th 2018, the PHP group released PHP 5.6.36. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.36 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.