转载

PHP 5.4.45/5.5.29/5.6.13 发布

PHP 5.4.45/5.5.29/5.6.13 发布，主要是安全问题修复。

下载： http://www.php.net/downloads.php

Windows 下载： http://windows.php.net/download/

PHP 5.4.45 更新列表：

  • Core:

    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).

    • Fixed bug #70219 (Use after free vulnerability in session deserializer).

  • EXIF:

    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).

  • hash:

    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).

  • PCRE:

    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).

  • SOAP:

    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).

  • SPL:

    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).

    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).

  • XSLT:

    • Fixed bug #69782 (NULL pointer dereference).

  • ZIP:

    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

PHP 5.5.29 更新列表：

  • Core:

    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).

    • Fixed bug #70219 (Use after free vulnerability in session deserializer).

  • EXIF:

    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).

  • hash:

    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).

  • PCRE:

    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).

  • SOAP:

    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).

  • SPL:

    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).

    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).

  • XSLT:

    • Fixed bug #69782 (NULL pointer dereference).

  • ZIP:

    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

PHP 5.6.13 更新列表：

  • Core:

    • Fixed bug #69900 (Too long timeout on pipes).

    • Fixed bug #69487 (SAPI may truncate POST data).

    • Fixed bug #70198 (Checking liveness does not work as expected).

    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).

    • Fixed bug #70219 (Use after free vulnerability in session deserializer).

  • CLI server:

    • Fixed bug #66606 (Sets HTTP_CONTENT_TYPE but not CONTENT_TYPE).

    • Fixed bug #70264 (CLI server directory traversal).

  • Date:

    • Fixed bug #70266 (DateInterval::__construct.interval_spec is not supposed to be optional).

    • Fixed bug #70277 (new DateTimeZone($foo) is ignoring text after null byte).

  • EXIF:

    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).

  • hash:

    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).

  • MCrypt:

    • Fixed bug #69833 (mcrypt fd caching not working).

  • Opcache:

    • Fixed bug #70237 (Empty while and do-while segmentation fault with opcode on CLI enabled).

  • PCRE:

    • Fixed bug #70232 (Incorrect bump-along behavior with /K and empty string match).

    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).

  • SOAP:

    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).

  • SPL:

    • Fixed bug #70290 (Null pointer deref (segfault) in spl_autoload via ob_start).

    • Fixed bug #70303 (Incorrect constructor reflection for ArrayObject).

    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).

    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).

  • Standard:

    • Fixed bug #70052 (getimagesize() fails for very large and very small WBMP).

    • Fixed bug #70157 (parse_ini_string() segmentation fault with INI_SCANNER_TYPED).

  • XSLT:

    • Fixed bug #69782 (NULL pointer dereference).

  • ZIP:

    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

更多内容请看 发行说明 。

正文到此结束
所属分类： 编程技术

热门推荐

相关文章

阿里云首购8折
说给你听

本文目录
随机标签
书籍教程
Java入门教程 bootstrap3 CSS Apache基础教程 php springboot-demo ionic 教程 Python mysql教程 eclipse Ubuntu VPS系统配置 AngularJS 教程 Struts2教程 MongoDB教程 Redis教程 Spring教程 Git教程 Jenkins进阶系列 openfire参考指南 Java设计模式 HBase教程 Maven教程 hibernate教程 Docker 教程 memcached教程 Quartz指南 ANTLR教程 SpringCloud Hive教程 Ant教程 java实例教程 Hazelcast教程 深入浅出MyBatis Elastic-Job-Lite XStream教程 SVN教程 ibaties教程 rabittmq教程 Hadoop教程 WebService CXF学习 solr教程 JPA教程 ActiveMQ中文指南 Java内存模型 dubbo教程 Linux入门视频教程
近期评论
  1. 1 Spring Boot集成Https快速入门Demo
  2. 2 Spring Boot集成easypoi快速入门Demo
  3. 3 Spring Boot集成webflux快速入门Demo
  4. 4 Spring Boot集成Graphql快速入门Demo
  5. 5 Spring Boot API 多版本快速入门Demo
  6. 6 Spring Boot内容协商快速入门Demo
  7. 7 Spring Boot集成Debezium实现postgres增量同步
  8. 8 Spring Boot单元测试快速入门Demo
  9. 9 Spring Boot集成Spring Retry快速入门Demo
  10. 10 Spring Boot集成AJ-Captcha实现滑动验证码功能
网站信息
  • 文章总数：155,454 篇
  • 文件总数：468,734 个
  • 标签总数：2,262 个
  • 分类总数：93 个
  • 留言数量：2,538 条
  • 在线人数：684 人
  • 运行天数：4,190天
  • 最后更新：2024年04月17日03点
Loading...

其他链接

关于本站

本站定位：个人技术类博客

本站作用：写博客、记日志、闲聊扯淡鼓捣技术。

问题交流

[HBLOG]公众号 HBLOG HBLOG