红联Linux门户
Linux帮助

PHP 5.5.10发布

发布时间:2014-03-07 09:13:12来源:红联作者:empast
脚本语言PHP最新稳定版5.5.10发布.2014-03-06.上个版本是2014-02-06的5.5.9。修正了 CVE-2014-1943, CVE-2014-2270,CVE-2013-7327等大约10个Bug.5.4未更新还是2014-02-06的5.4.25.5.3除非重大安全漏洞已不做常规更新(5.3.28)。

完全改进:

Version 5.5.10
6-Mar-2014

Core:

Fixed bug #66574 (Allow multiple paths in php_ini_scanned_path).

Date:

Fixed bug #45528 (Allow the DateTimeZone constructor to accept timezones per offset too).

Fileinfo:

Fixed bug #66731 (file: infinite recursion (CVE-2014-1943)).

Fixed bug #66820 (out-of-bounds memory access in fileinfo (CVE-2014-2270)).

GD:

Fixed bug #66815 (imagecrop(): insufficient fix for NULL defer (CVE-2013-7327)).

JSON:

Fixed bug #65753 (JsonSerializeable couldn't implement on module extension).

LDAP:

Implemented ldap_modify_batch (https://wiki.php.net/rfc/ldap_modify_batch).

Openssl:

Fixed bug #66501 (Add EC key support to php_openssl_is_private_key).

PCRE:

Upgraded to PCRE 8.34.

Pgsql:

Added warning for dangerous client encoding and remove possible injections for pg_insert()/pg_update()/pg_delete()/pg_select().

下载:http://us3.php.net/distributions/php-5.5.10.tar.bz2

来自:oschina开源中国社区
文章评论

共有 0 条评论