PHP 5.5.2 PHP开发小组宣布发布。大约20个bug是修复,包括安全问题,OpenSSL中的模块和会话机制问题(CVE-2013-4248)(CVE-2011-4718)。鼓励所有的PHP用户升级到这个版本。下载:http://www.php.net/downloads.php修复的内容包括Core:
Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails).
Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value).
Fixed bug #65304 (Use of max int in array_sum).
Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case).
Fixed bug #62691 (solaris sed has no -i switch).
Fixed bug #61345 (CGI mode - make install don't work).
Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d).
DOM:
Added flags option to DOMDocument::schemaValidate() and DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag.
OPcache:
Added opcache.restrict_api configuration directive that may limit usage of OPcahce API functions only to patricular script(s).
Added support for glob symbols in blacklist entries (?, *, **).
Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on shutdown).
Openssl:
Fixed handling null bytes in subjectAltName (CVE-2013-4248).
PDO_mysql:
Fixed bug #65299 (pdo mysql parsing errors).
Phar:
Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents).
Pgsql:
Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()).
Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).
Sessions:
Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions (CVE-2011-4718).
Fixed possible buffer overflow under Windows. Note: Not a security fix.
Changed session.auto_start to PHP_INI_PERDIR.
SOAP:
Fixed bug #65018 (SoapHeader problems with SoapServer).
SPL:
Fixed bug #65328 (Segfault when getting SplStack object Value).
Added RecursiveTreeIterator setPostfix and getPostifx methods.
Fixed bug #61697 (spl_autoload_functions returns lambda functions incorrectly).
Streams:
Fixed bug #65268 (select() implementation uses outdated tick API).
Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails).
Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value).
Fixed bug #65304 (Use of max int in array_sum).
Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case).
Fixed bug #62691 (solaris sed has no -i switch).
Fixed bug #61345 (CGI mode - make install don't work).
Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d).
DOM:
Added flags option to DOMDocument::schemaValidate() and DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag.
OPcache:
Added opcache.restrict_api configuration directive that may limit usage of OPcahce API functions only to patricular script(s).
Added support for glob symbols in blacklist entries (?, *, **).
Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on shutdown).
Openssl:
Fixed handling null bytes in subjectAltName (CVE-2013-4248).
PDO_mysql:
Fixed bug #65299 (pdo mysql parsing errors).
Phar:
Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents).
Pgsql:
Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()).
Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).
Sessions:
Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions (CVE-2011-4718).
Fixed possible buffer overflow under Windows. Note: Not a security fix.
Changed session.auto_start to PHP_INI_PERDIR.
SOAP:
Fixed bug #65018 (SoapHeader problems with SoapServer).
SPL:
Fixed bug #65328 (Segfault when getting SplStack object Value).
Added RecursiveTreeIterator setPostfix and getPostifx methods.
Fixed bug #61697 (spl_autoload_functions returns lambda functions incorrectly).
Streams:
Fixed bug #65268 (select() implementation uses outdated tick API).
解决方案 »
- 语法问题,求高手解答。
- PHP 创建windows下创建中间带有空格的文件名失败
- 关于if的错误, unexpected T_IF, expecting ')'
- 联合查询后想知道是哪个表
- 刚学php有些问题想向大家请教?
- mysql语句:怎样在一对多中实现一对一?
- 谁有 FCKEditor 的使用手册?我想看看如何使用?我不晓得我的方法对不?(代码内详)
- 请教高手一个关于PHP解析XML的问题!!!!!!!!!!!!!!!!!
- php session 问题 在线等
- 请问在PHP里面可不可以实现多线程编程????
- php切换数据库的问题,在线等
- mysql_ pconnect和mysql_connect 有什么区别呢
PHP 5.5.2 暂时就算了不确定更换操作系统后,我的bp股票数据源是否还能用
挣钱还是第一位的