PHP 5.5.2 Released

Aug 21, 2013, by admin

After a month the PHP Development team has announced the release of PHP 5.5.2 finally About 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248) and session fixation problem (CVE-2011-4718). All users of PHP are encouraged to upgrade to this release.

Highlights

Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions (CVE-2011-4718).

Fixed possible buffer overflow under Windows. Note: Not a security fix.

Changed session.auto_start to PHP_INI_PERDIR.

Fixed handling null bytes in subjectAltName (CVE-2013-4248)

Added opcache.restrict_api configuration directive that may limit usage of OPcahce API functions only to patricular script(s).

Added support for glob symbols in blacklist entries (?, *, **).

To know more check the changelog

Download PHP 5.5.2

For source download Click Here

For windows Click Here