Security

On June 23rd 2016, the PHP group published PHP 7.0.8. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version. Please also note that bcmatch, dba, mbstring, soap, xml and zip now have their separate dedicated packages. Packages of PHP 7.0.8 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis, ssh2 and xdebug (Careful, PHP 7 support from some of them is still very young!). ...

On June 23rd 2016, the PHP group released PHP 5.6.23. Several bugs were fixed in this release, including security-related ones. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.23 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

On June 23rd 2016, the PHP group released PHP 5.5.37. This is a security release, several security bugs were fixed. All PHP 5.5 users are encouraged to upgrade to this version. And because it’s probably the last PHP 5.5 release before it reaches its security EOL, you’d better upgrade to PHP 5.6 and above as soon as possible. PHP 5.5.37 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures. ...

Nginx 1.10 - the new stable major version - has been released on May 24th 2016, followed by Nginx 1.10.1 on May 31st to fix the CVE-2016-4450 vulnerability. The 1.10 branch brings a lot of new features and improvements, including : HTTP/2 support: The SPDY module was replaced by the HTTP/2 module. Please make sure to update your listen directives. The new stream module that lets you proxy and load-balance UDP and TCP traffic. Support for dynamic modules. SO_REUSEPORT support, TCP support for DNS resolution… More details in this blog post. ...

On May 26th 2016, the PHP group published PHP 7.0.7. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version. Packages of PHP 7.0.7 are now available for Debian 8 “Jessie” on amd64 and i386 architectures, along with the following PECL extensions : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and debug (Careful, PHP 7 support from some of them is still very young!). ...

On May 26th 2016, the PHP group released PHP 5.6.22. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.22 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

On May 26th 2016, the PHP group released PHP 5.5.36. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.36 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures. The following modules have been packaged too : apcu 4.0.7 gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.11 pecl_http 1.7.6 pinba (master) redis 2.2.7 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.2 xhprof 0.9.4 Please read the Changelog before upgrading.

On April 29th 2016, the PHP group released PHP 5.6.21. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.21 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.

On April 29th 2016, the PHP group published PHP 7.0.6. This is a security release. Several security bugs were fixed in this release, including CVE-2016-3078 and CVE-2016-3074. All PHP 7.0 users are encouraged to upgrade to this version. Packages of PHP 7.0.6 are now available for Debian 8 “Jessie” on amd64 and i386 architectures. Please note that : PHP 7 and PHP 5 from Jessie are now co-installable on the same machine Packages of the following PECL extensions are now available : APCu, APCu_bc, geoip, igbinary, imagick, memcached, mongodb, msgpack, redis and xdebug. Careful, PHP 7 support from some of them is still very young. The thread-safe version of all these packages will be published soon. As usual : ...

On March 31st 2016, the PHP group released PHP 5.6.20. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.20 packages are now available for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors, along with the usual PECL extensions.