红联Linux门户
Linux帮助

PHP 5.5.30/5.6.14发布,安全修复版本

发布时间:2015-10-03 09:23:00来源:红联作者:empast
PHP 5.5.30 和 PHP 5.6.14 发布,这两个版本是个安全更新版本,主要修复了两个安全问题,强烈建议所有 5.5 和 5.6 系列用户更新到最新版本。此版本现已提供下载,Windows 二进制下载:windows.php.net/download/。

PHP 5.5.30 更新内容:

Phar:
•Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()).
•Fixed bug #70433 (Uninitialized pointer in phar_make_dirstream when zip entry filename is "/").

PHP 5.6.14 更新内容:
•Core: •Fixed bug #70370 (Bundled libtool.m4 doesn't handle FreeBSD 10 when building extensions).

•CLI server: •Fixed bug #68291 (404 on urls with '+').

•DOM: •Fixed bug #70001 (Assigning to DOMNode::textContent does additional entity encoding).

•ldap: •Fixed bug #70465 (Bug in ldap_search() modifies LDAP_OPT_TIMELIMIT/DEREF's values). (Tyson Andre).
•Fixed bug #69574 (ldap timeouts not enforced). (Côme Bernigaud).

•Mysqlnd: •Fixed bug #70456 (mysqlnd doesn't activate TCP keep-alive when connecting to a server).

•OpenSSL: •Fixed bug #55259 (openssl extension does not get the DH parameters from DH key resource).
•Fixed bug #70395 (Missing ARG_INFO for openssl_seal()).
•Fixed bug #60632 (openssl_seal fails with AES).
•Fixed bug #68312 (Lookup for openssl.cnf causes a message box).

•PDO: •Fixed bug #70389 (PDO constructor changes unrelated variables).

•Phar: •Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()).
•Fixed bug #70433 (Uninitialized pointer in phar_make_dirstream when zip entry filename is "/").

•Phpdbg: •Fix phpdbg_break_next() sometimes not breaking.

•Standard: •Fixed bug #67131 (setcookie() conditional for empty values not met).

•Streams: •Fixed bug #70361 (HTTP stream wrapper doesn't close keep-alive connections).

•Zip: •Fixed bug #70322 (ZipArchive::close() doesn't indicate errors).

下载地址:http://www.php.net/downloads.php

来自:开源中国社区
文章评论

共有 0 条评论