PHP 5.5.30/5.6.14 发布，安全修复版本

文章转载开源中国

PHP 5.5.30 和 PHP 5.6.14 发布，这两个版本是个安全更新版本，主要修复了两个安全问题，强烈建议所有 5.5 和 5.6 系列用户更新到最新版本。此版本现已提供下载，Windows 二进制下载：windows.php.net/download/。

PHP 5.5.30 更新内容：

Phar:

• Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()).
• Fixed bug #70433 (Uninitialized pointer in phar_make_dirstream when zip entry filename is “/”).

PHP 5.6.14 更新内容：

• Core:
  • Fixed bug #70370 (Bundled libtool.m4 doesn’t handle FreeBSD 10 when building extensions).
• CLI server:
  • Fixed bug #68291 (404 on urls with ‘+’).
• DOM:
  • Fixed bug #70001 (Assigning to DOMNode::textContent does additional entity encoding).
• ldap:
  • Fixed bug #70465 (Bug in ldap_search() modifies LDAP_OPT_TIMELIMIT/DEREF’s values). (Tyson Andre).
  • Fixed bug #69574 (ldap timeouts not enforced). (Côme Bernigaud).
• Mysqlnd:
  • Fixed bug #70456 (mysqlnd doesn’t activate TCP keep-alive when connecting to a server).
• OpenSSL:
  • Fixed bug #55259 (openssl extension does not get the DH parameters from DH key resource).
  • Fixed bug #70395 (Missing ARG_INFO for openssl_seal()).
  • Fixed bug #60632 (openssl_seal fails with AES).
  • Fixed bug #68312 (Lookup for openssl.cnf causes a message box).
• PDO:
  • Fixed bug #70389 (PDO constructor changes unrelated variables).
• Phar:
  • Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()).
  • Fixed bug #70433 (Uninitialized pointer in phar_make_dirstream when zip entry filename is “/”).
• Phpdbg:
  • Fix phpdbg_break_next() sometimes not breaking.
• Standard:
  • Fixed bug #67131 (setcookie() conditional for empty values not met).
• Streams:
  • Fixed bug #70361 (HTTP stream wrapper doesn’t close keep-alive connections).
• Zip:
  • Fixed bug #70322 (ZipArchive::close() doesn’t indicate errors).