No new packages have been published here for years. I still kept the repositories online, because pulling them would have broken every old server that still has Dotdeb in its sources.list.

The PHP2Shell vulnerabilities changed my mind: Every PHP package served from Dotdeb is affected, none of them will ever be fixed, and installing them today means putting a remotely exploitable server on the Internet. At this point, they’re basically malware, and it would not be responsible to keep serving them.

As a consequence, all Dotdeb repositories will be shut down on December 31st, 2026.

If you still rely on Dotdeb, please remove it from your APT sources and move to supported versions of Debian and PHP before then. After that date, apt-get update will fail on any server still pointing here.

If you need long term support for PHP packages, you should have a look at Freexian’s PHP LTS offering.

As I already said in my last post, thanks again to everyone who used, tested, and supported Dotdeb over all these years.