15 Aug 2013, PHP 5.5.2
- Core:
+ . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference
+ fails). (Laruence)
+ . Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was
+ erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey
+ avp200681 gmail com).
+ . Fixed bug #65304 (Use of max int in array_sum). (Laruence)
+ . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very
+ limited case). (Arpad)
. Fixed bug #62691 (solaris sed has no -i switch). (Chris Jones)
. Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold)
. Fixed bug #61268 (--enable-dtrace leads make to clobber
DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag.
(Chris Wright)
-- Sessions:
- . Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions)
- which protects against session fixation attacks and session collisions.
- (Yasuo Ohgaki)
- . Fixed possible buffer overflow under Windows. Note: Not a security fix.
- (Yasuo)
- . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo)
-
-- Pgsql:
- . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update()
- /pg_delete()/pg_insert()). (Yasuo)
-
-15 Aug 2013, PHP 5.5.2
-
-- Core:
- . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference
- fails). (Laruence)
- . Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was
- erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey
- avp200681 gmail com).
- . Fixed bug #65304 (Use of max int in array_sum). (Laruence)
- . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very
- limited case). (Arpad)
-
- OPcache:
. Added opcache.restrict_api configuration directive that may limit
- usage of OPcahce API functions only to patricular script(s). (Dmitry)
+ usage of OPcache API functions only to particular script(s). (Dmitry)
. Added support for glob symbols in blacklist entries (?, *, **).
(Terry Elison, Dmitry)
. Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on
- PDO_mysql:
. Fixed bug #65299 (pdo mysql parsing errors). (Johannes)
+- Pgsql:
+ . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update()
+ /pg_delete()/pg_insert()). (Yasuo)
+
- Phar:
. Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for
some specific contents). (Stas)
+- Sessions:
+ . Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions)
+ which protects against session fixation attacks and session collisions.
+ (Yasuo Ohgaki)
+ . Fixed possible buffer overflow under Windows. Note: Not a security fix.
+ (Yasuo)
+ . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo)
+
- SOAP:
. Fixed bug #65018 (SoapHeader problems with SoapServer). (Dmitry)