Security

On April 16th 2015, the PHP group released PHP 5.6.8. Several bugs have been fixed some of them beeing security related, like CVE-2015-1351 and CVE-2015-1352. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.8 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors. Notes : Regression : php5-memcached still lacks JSON support Xcache, Xdebug and Xhprof are currently being worked on and should be available in the next few days

Zabbix 2.2.9 has been released on March 12th 2015. This release fixes known issues of Zabbix 2.2.x and introduces new minor features. Please read the release notes for more info. As usual, the packages are now available : for Debian 7.0 “Wheezy and 6.0 “Squeeze”, on both amd64 and i386 architectures.

On March 19th 2015, the PHP group released PHP 5.4.39. Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.4 users are encouraged to upgrade to this version. The corresponding packages are now available on Dotdeb : for Debian 7 “Wheezy” and Debian 6 “Squeeze”, on both amd64 and i386 architectures. The following modules have been packaged too : APC 3.1.13 apcu 4.0.7 ffmpeg 0.6.0 (Squeeze only) gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.5 pecl_http 1.7.6 pinba (master) redis 2.2.7 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.2 xhprof 0.9.4 zendopcache 7.0.4 As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

On March 20th 2015, the PHP group released PHP 5.5.23. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.23 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures. The following modules have been packaged too : apcu 4.0.7 gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.5 pecl_http 1.7.6 pinba (master) redis 2.2.7 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.2 xhprof 0.9.4 Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

On March 20th 2015, the PHP group released PHP 5.6.7. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.6 users are encouraged to upgrade to this version. PHP 5.6.7 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors. Notes : Regression : php5-memcached still lacks JSON support Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m still working on it, sorry for the delay End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

On February 18th 2015, the PHP group released PHP 5.4.38. Seven security-related bugs were fixed in this release, including CVE-2015-0273 and mitigation for CVE-2015-0235. All PHP 5.4 users are encouraged to upgrade to this version. The corresponding packages are now available on Dotdeb : for Debian 7 “Wheezy” and Debian 6 “Squeeze”, on both amd64 and i386 architectures. The following modules have been packaged too : APC 3.1.13 apcu 4.0.7 ffmpeg 0.6.0 (Squeeze only) gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.3 pecl_http 1.7.6 pinba (master) redis 2.2.5 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.1 xhprof 0.9.4 zendopcache 7.0.4 As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

On February 19th 2015, the PHP group released PHP 5.5.22. This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.22 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures. The following modules have been packaged too : apcu 4.0.7 gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.3 pecl_http 1.7.6 pinba (master) redis 2.2.5 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.3.1 xhprof 0.9.4 Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

On February 19th 2015, the PHP group released PHP 5.6.6. This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.6 users are encouraged to upgrade to this version. (…) The list of changes is recorded in the ChangeLog. PHP 5.6.6 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures, in ZTS and non-ZTS (default) flavors. Notes : Regression : php5-memcached still lacks JSON support Missing packages : Xcache, Xdebug and Xhprof are still missing, I’m working on it End of support : Spplus won’t be supported anymore. Pinba’s fate hasn’t been decided yet.

On January 22nd 2015, the PHP group released PHP 5.4.37. Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.4 users are encouraged to upgrade to this version. The corresponding packages are now available on Dotdeb : for Debian 7 “Wheezy” and Debian 6 “Squeeze”, on both amd64 and i386 architectures. The following modules have been packaged too : APC 3.1.13 apcu 4.0.7 ffmpeg 0.6.0 (Squeeze only) gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.1 pecl_http 1.7.6 pinba (master) redis 2.2.5 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.2.7 xhprof 0.9.4 zendopcache 7.0.4 As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

On January 22nd 2015, the PHP group released PHP 5.5.21. This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.5 users are encouraged to upgrade to this version. PHP 5.5.21 packages are now available on Dotdeb for Debian 7.7 “Wheezy”, on both amd64 and i386 architectures. The following modules have been packaged too : apcu 4.0.7 gearman 0.8.3 geoip 1.0.8 imagick 3.1.2 memcache 3.0.8 memcached 2.2.0 mongo 1.6.0 pecl_http 1.7.6 pinba (master) redis 2.2.5 spplus 1.1 ssh2 0.12 xcache 3.2.0 xdebug 2.2.7 xhprof 0.9.4 Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.