robin 2008-5-14 08:39
PHP 5.2.6 发布提供下载
五一劳动节,PHP5.2.6版本发布.
修复4个安全方面的问题,把 PCRE 更新到了版本 7.6
同时还修复了130多处BUG
推荐有需要的用户更新.
[url=http://cn2.php.net/get/php-5.2.6.tar.gz/from/cn.php.net/mirror][color=#0000ff]linux 系统点这里下载[/color][/url]
[url=http://cn.php.net/get/php-5.2.6-win32-installer.msi/from/this/mirror][color=#0000ff]WINDOWS安装包点这里下载[/color][/url] [url=http://cn2.php.net/get/php-5.2.6-Win32.zip/from/cn.php.net/mirror][color=#0000ff]WINDOWS ZIP 解压包版本点这里下载[/color][/url]
需要其它版本,请到[url=http://www.php.net/downloads.php][color=#0000ff]官方[/color][/url]去下载
以下是Version 5.2.6的ChangeLog:(英文)
[list][*]Security Fixes[list][*]Fixed possible stack buffer overflow in FastCGI SAPI. (Andrei Nigmatulin)[*]Properly address incomplete multibyte chars inside escapeshellcmd() (Ilia, Stefan Esser)[*]Fixed security issue detailed in CVE-2008-0599. (Rasmus)[*]Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz. (Ilia)[*]Upgraded PCRE to version 7.6 (Nuno)[/list][*]Fixed two possible crashes inside posix extension (Tony)[*]Fixed incorrect heredoc handling when label is used within the block. (Matt)[*]Fixed sending of uninitialized paddings which may contain some information. (Andrei Nigmatulin)[*]Fixed a bug in formatting timestamps when DST is active in the default timezone (Derick)[*]Fix integer overflow in printf(). (Stas, Maksymilian Aciemowicz)[*]Fixed potential memleak in stream filter parameter for zlib filter. (Greg)[*]Added Reflection API metadata for the methods of the DOM classes. (Sebastian)[*]Fixed weird behavior in CGI parameter parsing. (Dmitry, Hannes Magnusson)[*]Fixed a bug with PDO::FETCH_COLUMN|PDO::FETCH_GROUP mode when a column # by which to group by data is specified. (Ilia)[*]Fixed segfault in filter extension when using callbacks. (Arnar Mar Sig, Felipe)[*]Fixed faulty fix for bug Fixed bug [url=http://bugs.php.net/40189][color=#0000ff]#40189[/color][/url] (endless loop in zlib.inflate stream filter). (Greg)[*]Fixed bug [url=http://bugs.php.net/44742][color=#0000ff]#44742[/color][/url] (timezone_offset_get() causes segmentation faults). (Derick)[*]Fixed bug [url=http://bugs.php.net/44720][color=#0000ff]#44720[/color][/url] (Prevent crash within session_register()). (Scott)[*]Fixed bug [url=http://bugs.php.net/44703][color=#0000ff]#44703[/color][/url] (htmlspecialchars() does not detect bad character set argument). (Andy Wharmby)[*]Fixed bug [url=http://bugs.php.net/44673][color=#0000ff]#44673[/color][/url] (With CGI argv/argc starts from arguments, not from script) (Dmitry)[*]Fixed bug [url=http://bugs.php.net/44667][color=#0000ff]#44667[/color][/url] (proc_open() does not handle pipes with the mode 'wb' correctly). (Jani)[*]Fixed bug [url=http://bugs.php.net/44663][color=#0000ff]#44663[/color][/url] (Crash in imap_mail_compose if "body" parameter invalid). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44650][color=#0000ff]#44650[/color][/url] (escapeshellscmd() does not check arg count). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44613][color=#0000ff]#44613[/color][/url] (Crash inside imap_headerinfo()). (Ilia, jmessa)[*]Fixed bug [url=http://bugs.php.net/44603][color=#0000ff]#44603[/color][/url] (Order issues with Content-Type/Length headers on POST). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44594][color=#0000ff]#44594[/color][/url] (imap_open() does not validate # of retries parameter). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44591][color=#0000ff]#44591[/color][/url] (imagegif's filename parameter). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44557][color=#0000ff]#44557[/color][/url] (Crash in imap_setacl when supplied integer as username) (Thomas Jarosch)[*]Fixed bug [url=http://bugs.php.net/44487][color=#0000ff]#44487[/color][/url] (call_user_method_array issues a warning when throwing an exception). (David Soria Parra)[*]Fixed bug [url=http://bugs.php.net/44478][color=#0000ff]#44478[/color][/url] (Inconsistent behaviour when assigning new nodes). (Rob, Felipe)[*]Fixed bug [url=http://bugs.php.net/44445][color=#0000ff]#44445[/color][/url] (email validator does not handle domains starting/ending with a -). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44440][color=#0000ff]#44440[/color][/url] (st_blocks undefined under BeOS). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44394][color=#0000ff]#44394[/color][/url] (Last two bytes missing from output). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44388][color=#0000ff]#44388[/color][/url] (Crash inside exif_read_data() on invalid images) (Ilia)[*]Fixed bug [url=http://bugs.php.net/44373][color=#0000ff]#44373[/color][/url] (PDO_OCI extension compile failed). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44333][color=#0000ff]#44333[/color][/url] (SEGFAULT when using mysql_pconnect() with client_flags). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44306][color=#0000ff]#44306[/color][/url] (Better detection of MIPS processors on Windows). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44242][color=#0000ff]#44242[/color][/url] (metaphone('CMXFXM') crashes PHP). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44233][color=#0000ff]#44233[/color][/url] (MSG_PEEK undefined under BeOS R5). (jonathonfreeman at gmail dot com, Ilia)[*]Fixed bug [url=http://bugs.php.net/44216][color=#0000ff]#44216[/color][/url] (strftime segfaults on large negative value). (Derick)[*]Fixed bug [url=http://bugs.php.net/44209][color=#0000ff]#44209[/color][/url] (strtotime() doesn't support 64 bit timestamps on 64 bit platforms). (Derick)[*]Fixed bug [url=http://bugs.php.net/44206][color=#0000ff]#44206[/color][/url] (OCI8 selecting ref cursors leads to ORA-1000 maximum open cursors reached). (Oracle Corp.)[*]Fixed bug [url=http://bugs.php.net/44200][color=#0000ff]#44200[/color][/url] (A crash in PDO when no bound targets exists and yet bound parameters are present). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44197][color=#0000ff]#44197[/color][/url] (socket array keys lost on socket_select). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44191][color=#0000ff]#44191[/color][/url] (preg_grep messes up array index). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44189][color=#0000ff]#44189[/color][/url] (PDO setAttribute() does not properly validate values for native numeric options). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44184][color=#0000ff]#44184[/color][/url] (Double free of loop-variable on exception). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/44171][color=#0000ff]#44171[/color][/url] (Invalid FETCH_COLUMN index does not raise an error). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44166][color=#0000ff]#44166[/color][/url] (Parameter handling flaw in PDO::getAvailableDrivers()). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44159][color=#0000ff]#44159[/color][/url] (Crash: $pdo->setAttribute(PDO::STATEMENT_ATTR_CLASS, NULL)). (Felipe)[*]Fixed bug [url=http://bugs.php.net/44152][color=#0000ff]#44152[/color][/url] (Possible crash with syslog logging on ZTS builds). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44141][color=#0000ff]#44141[/color][/url] (private parent constructor callable through static function). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/44113][color=#0000ff]#44113[/color][/url] (OCI8 new collection creation can fail with OCI-22303). (Oracle Corp.)[*]Fixed bug [url=http://bugs.php.net/44069][color=#0000ff]#44069[/color][/url] (Huge memory usage with concatenation using . instead of .=). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/44046][color=#0000ff]#44046[/color][/url] (crash inside array_slice() function with an invalid by-ref offset). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44028][color=#0000ff]#44028[/color][/url] (crash inside stream_socket_enable_crypto() when enabling encryption without crypto type). (Ilia)[*]Fixed bug [url=http://bugs.php.net/44018][color=#0000ff]#44018[/color][/url] (RecursiveDirectoryIterator options inconsistancy). (Marcus)[*]Fixed bug [url=http://bugs.php.net/44008][color=#0000ff]#44008[/color][/url] (OCI8 incorrect usage of OCI-Lob->close crashes PHP). (Oracle Corp.)[*]Fixed bug [url=http://bugs.php.net/43998][color=#0000ff]#43998[/color][/url] (Two error messages returned for incorrect encoding for mb_strto[upper|lower]). (Rui)[*]Fixed bug [url=http://bugs.php.net/43994][color=#0000ff]#43994[/color][/url] (mb_ereg 'successfully' matching incorrect). (Rui)[*]Fixed bug [url=http://bugs.php.net/43954][color=#0000ff]#43954[/color][/url] (Memory leak when sending the same HTTP status code multiple times). (Scott)[*]Fixed bug [url=http://bugs.php.net/43927][color=#0000ff]#43927[/color][/url] (koi8r is missing from html_entity_decode()). (andy at demos dot su, Tony)[*]Fixed bug [url=http://bugs.php.net/43912][color=#0000ff]#43912[/color][/url] (Interbase column names are truncated to 31 characters). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43875][color=#0000ff]#43875[/color][/url] (Two error messages returned for $new and $flag argument in mysql_connect()). (Hannes)[*]Fixed bug [url=http://bugs.php.net/43863][color=#0000ff]#43863[/color][/url] (str_word_count() breaks on cyrillic "ya" in locale cp1251). (phprus at gmail dot com, Tony)[*]Fixed bug [url=http://bugs.php.net/43841][color=#0000ff]#43841[/color][/url] (mb_strrpos offset is byte count for negative values). (Rui)[*]Fixed bug [url=http://bugs.php.net/43840][color=#0000ff]#43840[/color][/url] (mb_strpos bounds check is byte count rather than a character count). (Rui)[*]Fixed bug [url=http://bugs.php.net/43808][color=#0000ff]#43808[/color][/url] (date_create never fails (even when it should)). (Derick)[*]Fixed bug [url=http://bugs.php.net/43793][color=#0000ff]#43793[/color][/url] (zlib filter is unable to auto-detect gzip/zlib file headers). (Greg)[*]Fixed bug [url=http://bugs.php.net/43703][color=#0000ff]#43703[/color][/url] (Signature compatibility check broken). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43677][color=#0000ff]#43677[/color][/url] (Inconsistent behaviour of include_path set with php_value). (manuel at mausz dot at)[*]Fixed bug [url=http://bugs.php.net/43663][color=#0000ff]#43663[/color][/url] (Extending PDO class with a __call() function doesn't work). (David Soria Parra)[*]Fixed bug [url=http://bugs.php.net/43647][color=#0000ff]#43647[/color][/url] (Make FindFile use PATH_SEPARATOR instead of ";"). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43635][color=#0000ff]#43635[/color][/url] (mysql extension ingores INI settings on NULL values passed to mysql_connect()). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43620][color=#0000ff]#43620[/color][/url] (Workaround for a bug inside libcurl 7.16.2 that can result in a crash). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43614][color=#0000ff]#43614[/color][/url] (incorrect processing of numerical string keys of array in arbitrary serialized data). (Dmitriy Buldakov, Felipe)[*]Fixed bug [url=http://bugs.php.net/43606][color=#0000ff]#43606[/color][/url] (define missing depencies of the exif extension). (crrodriguez at suse dot de)[*]Fixed bug [url=http://bugs.php.net/43589][color=#0000ff]#43589[/color][/url] (a possible infinite loop in bz2_filter.c). (Greg)[*]Fixed bug [url=http://bugs.php.net/43580][color=#0000ff]#43580[/color][/url] (removed bogus declaration of a non-existent php_is_url() function). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43559][color=#0000ff]#43559[/color][/url] (array_merge_recursive() doesn't behave as expected with duplicate NULL values). (Felipe, Tony)[*]Fixed bug [url=http://bugs.php.net/43533][color=#0000ff]#43533[/color][/url] (escapeshellarg('') returns null). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43527][color=#0000ff]#43527[/color][/url] (DateTime created from a timestamp reports environment timezone). (Derick)[*]Fixed bug [url=http://bugs.php.net/43522][color=#0000ff]#43522[/color][/url] (stream_get_line() eats additional characters). (Felipe, Ilia, Tony)[*]Fixed bug [url=http://bugs.php.net/43507][color=#0000ff]#43507[/color][/url] (SOAPFault HTTP Status 500 - would like to be able to set the HTTP Status). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43505][color=#0000ff]#43505[/color][/url] (Assign by reference bug). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43498][color=#0000ff]#43498[/color][/url] (file_exists() on a proftpd server got SIZE not allowed in ASCII mode). (Ilia, crrodriguez at suse dot de)[*]Fixed bug [url=http://bugs.php.net/43497][color=#0000ff]#43497[/color][/url] (OCI8 XML/getClobVal aka temporary LOBs leak UGA memory). (Chris)[*]Fixed bug [url=http://bugs.php.net/43495][color=#0000ff]#43495[/color][/url] (array_merge_recursive() crashes with recursive arrays). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43493][color=#0000ff]#43493[/color][/url] (pdo_pgsql does not send username on connect when password is not available). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43491][color=#0000ff]#43491[/color][/url] (Under certain conditions, file_exists() never returns). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43483][color=#0000ff]#43483[/color][/url] (get_class_methods() does not list all visible methods). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43482][color=#0000ff]#43482[/color][/url] (array_pad() does not warn on very small pad numbers). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43457][color=#0000ff]#43457[/color][/url] (Prepared statement with incorrect parms doesn't throw exception with pdo_pgsql driver). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43450][color=#0000ff]#43450[/color][/url] (Memory leak on some functions with implicit object __toString() call). (David C.)[*]Fixed bug [url=http://bugs.php.net/43386][color=#0000ff]#43386[/color][/url] (array_globals not reset to 0 properly on init). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43377][color=#0000ff]#43377[/color][/url] (PHP crashes with invalid argument for DateTimeZone). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43373][color=#0000ff]#43373[/color][/url] (pcntl_fork() should not raise E_ERROR on error). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43364][color=#0000ff]#43364[/color][/url] (recursive xincludes don't remove internal xml nodes properly). (Rob, patch from [email]ddb@bitxtender.de[/email])[*]Fixed bug [url=http://bugs.php.net/43301][color=#0000ff]#43301[/color][/url] (mb_ereg*_replace() crashes when replacement string is invalid PHP expression and 'e' option is used). (Jani)[*]Fixed bug [url=http://bugs.php.net/43295][color=#0000ff]#43295[/color][/url] (crash because of uninitialized SG(sapi_headers).mimetype). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43293][color=#0000ff]#43293[/color][/url] (Multiple segfaults in getopt()). (Hannes)[*]Fixed bug [url=http://bugs.php.net/43279][color=#0000ff]#43279[/color][/url] (pg_send_query_params() converts all elements in 'params' to strings). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43276][color=#0000ff]#43276[/color][/url] (Incomplete fix for bug #42739, mkdir() under safe_mode). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43248][color=#0000ff]#43248[/color][/url] (backward compatibility break in realpath()). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43221][color=#0000ff]#43221[/color][/url] (SimpleXML adding default namespace in addAttribute). (Rob)[*]Fixed bug [url=http://bugs.php.net/43216][color=#0000ff]#43216[/color][/url] (stream_is_local() returns false on "file://"). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43201][color=#0000ff]#43201[/color][/url] (Crash on using uninitialized vals and __get/__set). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43182][color=#0000ff]#43182[/color][/url] (file_put_contents() LOCK_EX does not work properly on file truncation). (Ilia)[*]Fixed bug [url=http://bugs.php.net/43175][color=#0000ff]#43175[/color][/url] (__destruct() throwing an exception with __call() causes segfault). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43128][color=#0000ff]#43128[/color][/url] (Very long class name causes segfault). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/43105][color=#0000ff]#43105[/color][/url] (PHP seems to fail to close open files). (Hannes)[*]Fixed bug [url=http://bugs.php.net/43092][color=#0000ff]#43092[/color][/url] (curl_copy_handle() crashes with > 32 chars long URL). (Jani)[*]Fixed bug [url=http://bugs.php.net/43003][color=#0000ff]#43003[/color][/url] (Invalid timezone reported for DateTime objects constructed using a timestamp). (Derick)[*]Fixed bug [url=http://bugs.php.net/42978][color=#0000ff]#42978[/color][/url] (mismatch between number of bound params and values causes a crash in pdo_pgsql). (Ilia)[*]Fixed bug [url=http://bugs.php.net/42945][color=#0000ff]#42945[/color][/url] (preg_split() swallows part of the string). (Nuno)[*]Fixed bug [url=http://bugs.php.net/42937][color=#0000ff]#42937[/color][/url] (__call() method not invoked when methods are called on parent from child class). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/42841][color=#0000ff]#42841[/color][/url] (REF CURSOR and oci_new_cursor() crash PHP). (Chris)[*]Fixed bug [url=http://bugs.php.net/42838][color=#0000ff]#42838[/color][/url] (Wrong results in array_diff_uassoc) (Felipe)[*]Fixed bug [url=http://bugs.php.net/42779][color=#0000ff]#42779[/color][/url] (Incorrect forcing from HTTP/1.0 request to HTTP/1.1 response). (Ilia)[*]Fixed bug [url=http://bugs.php.net/42736][color=#0000ff]#42736[/color][/url] (xmlrpc_server_call_method() crashes). (Tony)[*]Fixed bug [url=http://bugs.php.net/42692][color=#0000ff]#42692[/color][/url] (Procedure 'int1' not present with doc/lit SoapServer). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/42548][color=#0000ff]#42548[/color][/url] (mysqli PROCEDURE calls can't return result sets). (Hartmut)[*]Fixed bug [url=http://bugs.php.net/42505][color=#0000ff]#42505[/color][/url] (new sendmail default breaks on Netware platform) (Guenter Knauf)[*]Fixed bug [url=http://bugs.php.net/42369][color=#0000ff]#42369[/color][/url] (Implicit conversion to string leaks memory). (David C., Rob).[*]Fixed bug [url=http://bugs.php.net/42272][color=#0000ff]#42272[/color][/url] (var_export() incorrectly escapes char(0)). (Derick)[*]Fixed bug [url=http://bugs.php.net/42261][color=#0000ff]#42261[/color][/url] (Incorrect lengths for date and boolean data types). (Ilia)[*]Fixed bug [url=http://bugs.php.net/42190][color=#0000ff]#42190[/color][/url] (Constructing DateTime with TimeZone Indicator invalidates DateTimeZone). (Derick)[*]Fixed bug [url=http://bugs.php.net/42177][color=#0000ff]#42177[/color][/url] (Warning "array_merge_recursive(): recursion detected" comes again...). (Felipe)[*]Fixed bug [url=http://bugs.php.net/41941][color=#0000ff]#41941[/color][/url] (oci8 extension not lib64 savvy). (Chris)[*]Fixed bug [url=http://bugs.php.net/41828][color=#0000ff]#41828[/color][/url] (Failing to call RecursiveIteratorIterator::__construct() causes a sefault). (Etienne)[*]Fixed bug [url=http://bugs.php.net/41599][color=#0000ff]#41599[/color][/url] (setTime() fails after modify() is used). (Derick)[*]Fixed bug [url=http://bugs.php.net/41562][color=#0000ff]#41562[/color][/url] (SimpleXML memory issue). (Rob)[*]Fixed bug [url=http://bugs.php.net/40013][color=#0000ff]#40013[/color][/url] (php_uname() does not return nodename on Netware (Guenter Knauf)[*]Fixed bug [url=http://bugs.php.net/38468][color=#0000ff]#38468[/color][/url] (Unexpected creation of cycle). (Dmitry)[*]Fixed bug [url=http://bugs.php.net/32979][color=#0000ff]#32979[/color][/url] (OpenSSL stream->fd casts broken in 64-bit build) (stotty at tvnet dot hu)[/list]
