PHP 5.5.2發布

PHP 5.5.2 發布! 該版本修復了大約 20 個 bug，包括 OpenSSL 模塊的安全問題 (CVE-2013-4248). 建議所有的 PHP 用戶升級。
PHP 5.5.2下載地址：http://kr1.php.net/distributions/php-5.5.2.tar.gz

Version 5.5.2

15-Aug-2013

• Core:
  • Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails).
  • Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value).
  • Fixed bug #65304 (Use of max int in array_sum).
  • Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case).
  • Fixed bug #62691 (solaris sed has no -i switch).
  • Fixed bug #61345 (CGI mode - make install don't work).
  • Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d).
• DOM:
  • Added flags option to DOMDocument::schemaValidate() and DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag.
• OPcache:
  • Added opcache.restrict_api configuration directive that may limit usage of OPcahce API functions only to patricular script(s).
  • Added support for glob symbols in blacklist entries (?, *, **).
  • Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on shutdown).
• Openssl:
  • Fixed handling null bytes in subjectAltName (CVE-2013-4248).
• PDO_mysql:
  • Fixed bug #65299 (pdo mysql parsing errors).
• Phar:
  • Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents).
• Pgsql:
  • Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()).
  • Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).
• Sessions:
  • Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions.
  • Fixed possible buffer overflow under Windows. Note: Not a security fix.
  • Changed session.auto_start to PHP_INI_PERDIR.
• SOAP:
  • Fixed bug #65018 (SoapHeader problems with SoapServer).
• SPL:
  • Fixed bug #65328 (Segfault when getting SplStack object Value).
  • Added RecursiveTreeIterator setPostfix and getPostifx methods.
  • Fixed bug #61697 (spl_autoload_functions returns lambda functions incorrectly).
• Streams:
  • Fixed bug #65268 (select() implementation uses outdated tick API).