Ondřej Surý has released PHP 7.2.1, PHP 7.1.13, PHP 7.0.26, and PHP 5.6.33 packages for both Debian GNU/Linux 8 and 9



PHP 7.2.1

Change Log:

Core:
Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26).
Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
Fixed bug #75525 (Access Violation in vcruntime140.dll).
Fixed bug #74862 (Unable to clone instance when private __clone defined).
Fixed bug #75074 (php-process crash when is_file() is used with strings longer 260 chars).
CLI server:
Fixed bug #73830 (Directory does not exist).
FPM:
Fixed bug #64938 (libxml_disable_entity_loader setting is shared between requests).
GD:
Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
Opcache:
Fixed bug #75608 ("Narrowing occurred during type inference" error).
Fixed bug #75579 (Interned strings buffer overflow may cause crash).
Fixed bug #75570 ("Narrowing occurred during type inference" error).
Fixed bug #75556 (Invalid opcode 138/1/1).
PCRE:
Fixed bug #74183 (preg_last_error not returning error code after error).
Phar:
Fixed bug #74782 (remove file name from output to avoid XSS).
Standard:
Fixed bug #75511 (fread not free unused buffer).
Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit) (Remi)
Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP segment fault).
Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
Fixed bug #75574 (putenv does not work properly if parameter contains non-ASCII unicode character).
Zip:
Fixed bug #75540 (Segfault with libzip 1.3.1).

PHP 7.1.13

Change Log:
Core:
Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26).
Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
Fixed bug #74862 (Unable to clone instance when private __clone defined).
Fixed bug #75074 (php-process crash when is_file() is used with strings longer 260 chars).
CLI Server:
Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router script).
Fixed bug #73830 (Directory does not exist).
FPM:
Fixed bug #64938 (libxml_disable_entity_loader setting is shared between requests).
GD:
Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
Opcache:
Fixed bug #75608 ("Narrowing occurred during type inference" error).
Fixed bug #75579 (Interned strings buffer overflow may cause crash).
Fixed bug #75570 ("Narrowing occurred during type inference" error).
PCRE:
Fixed bug #74183 (preg_last_error not returning error code after error).
Phar:
Fixed bug #74782 (remove file name from output to avoid XSS).
Standard:
Fixed bug #75511 (fread not free unused buffer).
Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit) (Remi)
Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP segment fault).
Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
Fixed bug #75574 (putenv does not work properly if parameter contains non-ASCII unicode character).
Zip:
Fixed bug #75540 (Segfault with libzip 1.3.1).

PHP 7.0.26

Change Log:
CLI Server:
Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router script).
Core:
Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26).
FPM:
Fixed bug #64938 (libxml_disable_entity_loader setting is shared between requests).
GD:
Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
Opcache:
Fixed bug #75579 (Interned strings buffer overflow may cause crash).
PCRE:
Fixed bug #74183 (preg_last_error not returning error code after error).
Phar:
Fixed bug #74782 (Reflected XSS in .phar 404 page).
Standard:
Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP segment fault).
Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
Zip:
Fixed bug #75540 (Segfault with libzip 1.3.1).

PHP 5.6.33

Change Log:
GD:
Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
Phar:
Fixed bug #74782 (Reflected XSS in .phar 404 page).

To add the deb.sury.org PHP repository to your Debian installation, run as root:

apt-get install apt-transport-https lsb-release ca-certificates
wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
sh -c 'echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list'
apt-get update

To install PHP 7.2 with MySQL/MariaDB and php-fpm support:

apt-get install php7.2-cgi php7.2-gd php7.2-curl php7.2-imap php7.2-sqlite3 php7.2-mysql php7.2-tidy php7.2-pspell php7.2-recode php7.2-xml php7.2-intl php7.2-enchant php7.2-gmp php7.2-mbstring php7.2-soap php7.2-xmlrpc php7.2-zip php7.2-fpm

Please note that the mcrypt package is no longer available after the support has been removed from PHP 7.2

  PHP 7.2.1/7.1.13/7.0.26/5.6.33 Packages for Debian 8/9