PHP 5.5.2

Naviga SWZ: Home Page » News
News del 19 Agosto 13 Autore: Gianplugged
PHP 5.5.2
PHP (PHP: Hypertext Preprocessor) è un linguaggio di programmazione interpretato, originariamente concepito per la realizzazione di pagine web dinamiche.

Note di rilascio:

The PHP development team announces the immediate availability of PHP 5.5.2. About 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248) and session fixation problem (CVE-2011-4718). All users of PHP are encouraged to upgrade to this release.

For source downloads of PHP 5.5.2 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Changelog:

Core:
Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails).
Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to
FILTER_SANITIZE_SPECIAL_CHARS value).
Fixed bug #65304 (Use of max int in array_sum).
Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case).
Fixed bug #62691 (solaris sed has no -i switch).
Fixed bug #61345 (CGI mode - make install don´t work).
Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d).

DOM:
Added flags option to DOMDocument::schemaValidate() and DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag.

OPcache:
Added opcache.restrict_api configuration directive that may limit usage of OPcahce API functions only to patricular script(s).
Added support for glob symbols in blacklist entries (?, *, **).
Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on shutdown).

Openssl:
Fixed handling null bytes in subjectAltName (CVE-2013-4248).

PDO_mysql:
Fixed bug #65299 (pdo mysql parsing errors).

Phar:
Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents).

Pgsql:
Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()).
Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).

Sessions:
Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation
attacks and session collisions (CVE-2011-4718).
Fixed possible buffer overflow under Windows. Note: Not a security fix.
Changed session.auto_start to PHP_INI_PERDIR.

SOAP:
Fixed bug #65018 (SoapHeader problems with SoapServer).

SPL:
Fixed bug #65328 (Segfault when getting SplStack object Value).
Added RecursiveTreeIterator setPostfix and getPostifx methods.
Fixed bug #61697 (spl_autoload_functions returns lambda functions incorrectly).

Streams:
Fixed bug #65268 (select() implementation uses outdated tick API).
Inserisci un commento sul forum Commenta la News sul Forum

Voto:

Categoria: Linux

Licenza: Open Source

La Community di SWZone.it

La community con le risposte che cerchi ! Partecipa é gratis !
Iscrizione ForumIscriviti al Forum

Newsletter

Vuoi ricevere tutti gli aggiornamenti di SWZone direttamente via mail ?
Iscrizione NewsletterIscriviti alla Newsletter

NOTIZIE CORRELATE