转载

PHP 5.4.45/5.5.29/5.6.13 发布

PHP 5.4.45/5.5.29/5.6.13 发布，主要是安全问题修复。

下载： http://www.php.net/downloads.php

Windows 下载： http://windows.php.net/download/

PHP 5.4.45 更新列表：

  • Core:

    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).

    • Fixed bug #70219 (Use after free vulnerability in session deserializer).

  • EXIF:

    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).

  • hash:

    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).

  • PCRE:

    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).

  • SOAP:

    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).

  • SPL:

    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).

    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).

  • XSLT:

    • Fixed bug #69782 (NULL pointer dereference).

  • ZIP:

    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

PHP 5.5.29 更新列表：

  • Core:

    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).

    • Fixed bug #70219 (Use after free vulnerability in session deserializer).

  • EXIF:

    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).

  • hash:

    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).

  • PCRE:

    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).

  • SOAP:

    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).

  • SPL:

    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).

    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).

  • XSLT:

    • Fixed bug #69782 (NULL pointer dereference).

  • ZIP:

    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

PHP 5.6.13 更新列表：

  • Core:

    • Fixed bug #69900 (Too long timeout on pipes).

    • Fixed bug #69487 (SAPI may truncate POST data).

    • Fixed bug #70198 (Checking liveness does not work as expected).

    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).

    • Fixed bug #70219 (Use after free vulnerability in session deserializer).

  • CLI server:

    • Fixed bug #66606 (Sets HTTP_CONTENT_TYPE but not CONTENT_TYPE).

    • Fixed bug #70264 (CLI server directory traversal).

  • Date:

    • Fixed bug #70266 (DateInterval::__construct.interval_spec is not supposed to be optional).

    • Fixed bug #70277 (new DateTimeZone($foo) is ignoring text after null byte).

  • EXIF:

    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).

  • hash:

    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).

  • MCrypt:

    • Fixed bug #69833 (mcrypt fd caching not working).

  • Opcache:

    • Fixed bug #70237 (Empty while and do-while segmentation fault with opcode on CLI enabled).

  • PCRE:

    • Fixed bug #70232 (Incorrect bump-along behavior with /K and empty string match).

    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).

  • SOAP:

    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).

  • SPL:

    • Fixed bug #70290 (Null pointer deref (segfault) in spl_autoload via ob_start).

    • Fixed bug #70303 (Incorrect constructor reflection for ArrayObject).

    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).

    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).

  • Standard:

    • Fixed bug #70052 (getimagesize() fails for very large and very small WBMP).

    • Fixed bug #70157 (parse_ini_string() segmentation fault with INI_SCANNER_TYPED).

  • XSLT:

    • Fixed bug #69782 (NULL pointer dereference).

  • ZIP:

    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

更多内容请看 发行说明 。

正文到此结束
所属分类： 编程技术

热门推荐

相关文章

阿里云首购8折
说给你听

本文目录
随机标签
书籍教程
springboot-demo Java入门教程 bootstrap3 CSS Apache基础教程 php ionic 教程 Python mysql教程 eclipse Ubuntu VPS系统配置 AngularJS 教程 MongoDB教程 Struts2教程 Redis教程 Spring教程 Git教程 Jenkins进阶系列 openfire参考指南 Java设计模式 HBase教程 Maven教程 hibernate教程 Docker 教程 memcached教程 Quartz指南 Hive教程 Ant教程 ANTLR教程 SpringCloud java实例教程 springcloud-demo XStream教程 Hazelcast教程 Elastic-Job-Lite 深入浅出MyBatis SVN教程 ibaties教程 rabittmq教程 solr教程 Hadoop教程 WebService CXF学习 JPA教程 ActiveMQ中文指南 java-demo Java内存模型 dubbo教程 python3-demo Linux入门视频教程
近期评论
  1. 1 Spring Cloud Consul实现选举机制
  2. 2 Spring Boot集成ShedLock实现分布式定时任务
  3. 3 利用oss进行数据库和网站图片备份
  4. 4 Spring Cloud Stream实现数据流处理
  5. 5 Python3访问MySQL数据库快速入门Demo
  6. 6 Github开源项目作者可以免费申请 JetBrains 全家桶
  7. 7 Spring Cloud Vault快速入门Demo
  8. 8 Spring Cloud Gateway快速入门Demo
  9. 9 Spring Cloud Contract快速入门Demo
  10. 10 Spring Cloud Consul快速入门Demo
网站信息
  • 文章总数：82,714 篇
  • 文件总数：284,287 个
  • 标签总数：2,393 个
  • 分类总数：85 个
  • 留言数量：2,560 条
  • 在线人数：614 人
  • 运行天数：4,408天
  • 最后更新：2024年11月21日21点
Loading...

其他链接

关于本站

本站定位：个人技术类博客

本站作用：写博客、记日志、闲聊扯淡鼓捣技术。

问题交流

[HBLOG]公众号 HBLOG HBLOG