PHP 5.2.12 發布 修復60多個bug
PHP是一種新型的CGI程序編寫語言,易學易用,運行速度快,可以方便快捷地編寫出功能強大,運行速度快,并可同時運行于 Windows、Unix、Linux平臺的Web后臺程序, 內置了對文件上傳、密碼認證、Cookies操作、郵件收發、動態GIF生成等功能,PHP 直接為很多數據庫提供原本的連接,包括Oracle、Sybase、Postgres、Mysql、Informix、Dbase、Solid、 Access等,完全支持ODBC接口,用戶更換平臺時,無需變換PHP代碼,可即拿即用. http://cn.php.net/distributions/php-5.2.12.tar.bz2 (源碼)http://cn.php.net/distributions/php-5.2.12-Win32.zip (win 二進制包)
查看ChangeLog: http://www.php.net/ChangeLog-5.php#5.2.12
Security Enhancements and Fixes in PHP 5.2.12:
Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus) Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus) Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia) Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas) Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)
相關文章:
