PHP 5.5.22 for Wheezy

February 26, 2015 · Guillaume Plessis

On February 19th 2015, the PHP group released PHP 5.5.22.

This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.5 users are encouraged to upgrade to this version.

PHP 5.5.22 packages are now available on Dotdeb for Debian 7 “Wheezy”, on both amd64 and i386 architectures.

The following modules have been packaged too :

apcu 4.0.7
gearman 0.8.3
geoip 1.0.8
imagick 3.1.2
memcache 3.0.8
memcached 2.2.0
mongo 1.6.3
pecl_http 1.7.6
pinba (master)
redis 2.2.5
spplus 1.1
ssh2 0.12
xcache 3.2.0
xdebug 2.3.1
xhprof 0.9.4

Please read the Changelog and the migration guide (be aware of the backward incompatible changes) before upgrading.

Igor Urazov February 26, 2015
This release breaks phpunit coverage reports. It just hangs indefinitely. Haven’t dig this much as this hit me hard and I have to rollback to 5.5.21 packages. The only log I have is gdb trace of the stuck process. https://privatepaste.com/e13788db5d
I understand, that this might not be enough to debug the issue, my best guess is related to xdebug and generating coverage reports within phpunit.
- Igor Urazov February 26, 2015
  OK, I’ve replicated this problem under strace. Here is the end of relevant output https://privatepaste.com/f244708d64 Googling php: realloc(): invalid next size doesn’t reveal anything useful for me.
  - Igor Urazov February 26, 2015
    I experimented with this a bit and looks like it’s similar to https://github.com/puphpet/puphpet/issues/1368
    The combination that hits this crash is phpunit (tested with 3.7 branch and 4.5) coverage report with xdebug (2.2.7 and 2.3.1) and PHP 5.5.22.
    - Igor Urazov February 26, 2015
      Could you please package XDebug 2.3.1? This looks like problem within it, that may or may not be fixed, but al least http://xdebug.org/support.php says “Versions before 2.3 are no longer supported.”
      - Igor Urazov February 26, 2015
        Built 2.3.1 myself and reproduced the issue. Filled a bugreport http://bugs.xdebug.org/view.php?id=1117
      - Guillaume Plessis February 26, 2015
        @Igor : thank for your investigation and for your bug report. I’m very sorry for this issue. I’ll try to update Xdebug (BTW the package from Dotdeb is Xdebug 2.3.1) when it’s fixed.
      - Igor Urazov March 2, 2015
        The bug was located and fixed. https://github.com/xdebug/xdebug/commit/a71762d4ded9ebd8121dfdc8d2af2dbebb5cc3c7 Would you consider releasing a new debian version of php5-xdebug package with the pointed patch? The fix is staged for Xdebug 2.3.2, but there is no ETA.