Ondřej Surý has released PHP 7.2.4, PHP 7.1.16, PHP 7.0.29, and PHP 5.6.35 packages for both Debian GNU/Linux 8 and 9



PHP 7.2.4

Core:
Fixed bug #76025 (Segfault while throwing exception in error_handler).
Fixed bug #76044 ('date: illegal option -- -' in ./configure on FreeBSD).
FPM:
Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache access controls).
FTP:
Fixed ftp_pasv arginfo.
GD:
Fixed bug #73957 (signed integer conversion in imagescale()).
Fixed bug #76041 (null pointer access crashed php).
Fixed imagesetinterpolation arginfo.
iconv:
Fixed bug #75867 (Freeing uninitialized pointer).
Mbstring:
Fixed bug #62545 (wrong unicode mapping in some charsets).
Opcache:
Fixed bug #75969 (Assertion failure in live range DCE due to block pass misoptimization).
OpenSSL:
Fixed openssl_* arginfos.
PCNTL:
Fixed bug #75873 (pcntl_wexitstatus returns incorrect on Big_Endian platform (s390x)).
Phar:
Fixed bug #76085 (Segmentation fault in buildFromIterator when directory name contains a \n).
Standard:
Fixed bug #75961 (Strange references behavior).
Fixed some arginfos.
Fixed bug #76068 (parse_ini_string fails to parse "[foo]\nbar=1|>baz" with segfault).

PHP 7.1.16

Core:
Fixed bug #76025 (Segfault while throwing exception in error_handler).
Fixed bug #76044 ('date: illegal option -- -' in ./configure on FreeBSD).
FPM:
Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache access controls).
GD:
Fixed bug #73957 (signed integer conversion in imagescale()).
ODBC:
Fixed bug #76088 (ODBC functions are not available by default on Windows).
Opcache:
Fixed bug #76074 (opcache corrupts variable in for-loop).
Phar:
Fixed bug #76085 (Segmentation fault in buildFromIterator when directory name contains a \n).
Standard:
Fixed bug #74139 (mail.add_x_header default inconsistent with docs).
Fixed bug #76068 (parse_ini_string fails to parse "[foo]\nbar=1|>baz" with segfault).

PHP 7.0.29

FPM:
Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache access controls).

PHP 5.6.35

FPM:
Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache access controls).

To add the deb.sury.org PHP repository to your Debian installation, run as root:

apt-get install apt-transport-https lsb-release ca-certificates
wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
sh -c 'echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list'
apt-get update

To install PHP 7.2 with MySQL/MariaDB and php-fpm support:

apt-get install php7.2-cgi php7.2-gd php7.2-curl php7.2-imap php7.2-sqlite3 php7.2-mysql php7.2-tidy php7.2-pspell php7.2-recode php7.2-xml php7.2-intl php7.2-enchant php7.2-gmp php7.2-mbstring php7.2-soap php7.2-xmlrpc php7.2-zip php7.2-fpm

Please note that the mcrypt package is no longer available after the support has been removed from PHP 7.2