The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
Here are updated packages in the Yum repository:
Note PHP.net has EOL'd (End of Life) PHP 5.3, however this Webtatic release contains the latest security fixes since then. Currently I'm still deciding on how to proceed with either supporting PHP 5.3 for longer, or making it EOL. Maintaining it requires additional effort which I'd be interested in seeing if you would consider paying a subscription for.
To register an interest, email me at andy@webtatic.com.
The PHP 5.3.29-3 security release fixes 4 CVEs
* CVE-2014-3710
* CVE-2014-3668
* CVE-2014-3669
* CVE-2014-3670
Here are updated packages in the Yum repository:
The PHP 5.6.2, 5.5.18 and 5.4.34 releases fixes 3 CVEs (along with other bug fixes):
* CVE-2014-3668
* CVE-2014-3669
* CVE-2014-3670
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
Here are updated packages in the Yum repository:
Note PHP.net has EOL'd (End of Life) PHP 5.3, however this Webtatic release contains the latest security fixes since then. Currently I'm still deciding on how to proceed with either supporting PHP 5.3 for longer, or making it EOL. Maintaining it requires additional effort which I'd be interested in seeing if you would consider paying a subscription for.
To register an interest, email me at andy@webtatic.com.
The PHP 5.3.29-2 security release fixes 5 CVEs
* CVE-2014-2497
* CVE-2014-3587
* CVE-2014-3597
* CVE-2014-4670
* CVE-2014-4698
They are finally here. Webtatic now has released a Webtatic EL7 Yum repository for RHEL and CentOS 7.0.
The packages that are included in this release are:
* PHP 5.6
* PHP 5.5
* PHP 5.4
* Nginx 1.6
The Webtatic EL7 repository is accessible via https by default, although you can alter the /etc/yum.repos.d/webtatic*.repo files to change to http if needed.
Additionally, the EL6 and EL5 repositories can also be accessible via https, however will default to http due to potential issues in earlier RHEL/CentOS 6.x and 5.x releases. The version of the 'openssl' package determines whether https will work.
The reason for the delay in getting EL7 released was due to the general development and testing frameworks I use to roll out packages being slow to update for CentOS/RHEL 7.0 support, some of which I helped contribute support for.
Here are updated packages in the Yum repository:
The PHP 5.6.1 release fixes 1 CVE (along with other bug fixes):
* CVE-2014-3622
The Nginx 1.6.2 release fixes 1 CVE (along with other bug fixes):
* CVE-2014-3616
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
Here are updated packages in the Yum repository:
No CVE's were reported as fixed by these releases.