PHP 5.5.7/5.4.23/5.3.28 紧急发布

完全改进：

Version 5.5.7

12-Dec-2013

• Core:

• Fixed bug #66094 (unregister_tick_function tries to cast a Closure to a string).

• Fixed bug #65969 (Chain assignment with T_LIST failure).

• CLI server:

• Added some MIME types to the CLI web server.

• Implemented FR #65917 (getallheaders() is not supported by the built-in web     server) - also implements apache_response_headers()

• OPCache:

• Fixed bug #66176 (Invalid constant substitution).

• Fixed bug #65915 (Inconsistent results with require return value).

• Fixed bug #65559 (Opcache: cache not cleared if changes occur while running).

• readline:

• Fixed bug #65714 (PHP cli forces the tty to cooked mode).

• Openssl:

• Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420).

Version 5.4.23

12-Dec-2013

• Core:

• Fixed bug #66094 (unregister_tick_function tries to cast a Closure to a string).

• Fixed bug #65947 (basename is no more working after fgetcsv in certain situation).

• JSON:

• Fixed whitespace part of #64874 ("json_decode handles whitespace and case-sensitivity incorrectly").

• MySQLi:

• Fixed bug #66043 (Segfault calling bind_param() on mysqli).

• mysqlnd:

• Fixed bug #66124 (mysqli under mysqlnd loses precision when bind_param with 'i').

• Fixed bug #66141 (mysqlnd quote function is wrong with NO_BACKSLASH_ESCAPES after failed query).

• OpenSSL:

• Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420). (Stefan Esser).

• PDO:

• Fixed bug #65946 (sql_parser permanently converts values bound to strings).

Version 5.3.28

12-Dec-2013

• Openssl:

• Fixed handling null bytes in subjectAltName (CVE-2013-4073).

• Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420). (Stefan Esser).

下载：

http://cn2.php.net/distributions/php-5.5.7.tar.bz2

http://cn2.php.net/distributions/php-5.4.23.tar.bz2

http://cn2.php.net/distributions/php-5.3.28.tar.bz2