Month: May 2012

Categories
Redis

Redis 2.4.14

Redis 2.4.14 has been released to fix many non trivial bugs :

  • [BUGFIX] Fixed issue #518 (Redis 99% CPU when master down).
  • [BUGFIX] Fixed issue #516 (ZINTERSTORE mixing sets and zsets).
  • [BUGFIX] Fixed a bug in install_server.sh when using chkconfig
  • [BUGFIX] Fixes to --test-memory implementation.
  • [BUGFIX] Allow PREFIX to be overridden in Makefile.
  • [BUGFIX] The test is now more reliable on slow computers.
  • redis-cli –pipe mode, see http://redis.io/topics/mass-insert
  • Much better expired keys collection algorithm that makes the server much more responsive when a lot of keys are expiring at the same time.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. The upgrade urgency is high.

Categories
PHP

Security : PHP 5.4.3 and PHP 5.3.13

PHP 5.4.3 and PHP 5.3.13 have been released by the PHP development team to fix some critical security issues :

  • Source code disclosure with a trivial request (CVE-2012-1823 and CVE-2012-2311) –  PHP 5.4 and 5.3 are vulnerable
  • buffer overflow in apache_request_headers() (CVE-2012-2329) – only PHP 5.4 is vulnerable.

If you’re using the CGI flavor of PHP, upgrading is highly recommended. You can see more info on PHP’s website and on this useful blog post.

Packages of PHP 5.4.3 and PHP 5.3.13 are available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. Please also note that they fix the error logging features of PHP-FPM.

As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.

Categories
MySQL

MySQL 5.5.24

The packages of MySQL 5.5.24 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. It fixes an undisclosed security issue (thanks Oracle) and some other bugs as well.

As usual, please read carefully the full Changelog before upgrading.

Note : the packages have been updated to include a missing init script. Sorry for the mess.

Categories
MySQL

Security update : MySQL 5.1.62

MySQL 5.1.62 packages are now available for Debian 6.0 “Squeeze” on amd64 and i386 architectures.

This is a important security update that fixes unspecified vulnerabilities identified by Oracle in all versions of MySQL 5.1 earlier than 5.1.62. If you did not upgrade to MySQL 5.5, please consider upgrading your MySQL server (at least) to 5.1.62.

FYI, CVE list is as follows :

The corresponding Pinba storage engine has also been rebuilt.

And, as usual, please read the Changelog before upgrading.

Categories
Redis

Redis 2.4.13

Redis 2.4.13 has been released to fix a critical bug in KEYS command :

  • [BUGFIX] Fix for KEYS command: if the DB contains keys with expires the KEYS command may return the wrong output, having duplicated or missing keys. See issue #487 and #488 on github for details.

The packages are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. Upgrading is strongly advised.