php 5.5.7/5.4.23/5.3.28紧急发布.2013-12-13.上个版本是2013-11-14的5.5.6/5.4.22。全部修正了一个 openssl的安全漏洞（cve-2013-6420）5.3本来已停止常规开发也更新了。 总共修正了10几个bug(包括opcache的几个bug)及安全漏洞。
完全改进：
version 5.5.7
12-dec-2013
core:
fixed bug #66094 (unregister_tick_function tries to cast a closure to a string).
fixed bug #65969 (chain assignment with t_list failure).
cli server:
added some mime types to the cli web server.
implemented fr #65917 (getallheaders() is not supported by the built-in web server) - also implements apache_response_headers()
opcache:
fixed bug #66176 (invalid constant substitution).
fixed bug #65915 (inconsistent results with require return value).
fixed bug #65559 (opcache: cache not cleared if changes occur while running).
readline:
fixed bug #65714 (php cli forces the tty to cooked mode).
openssl:
fixed memory corruption in openssl_x509_parse() (cve-2013-6420).
version 5.4.23
12-dec-2013
core:
fixed bug #66094 (unregister_tick_function tries to cast a closure to a string).
fixed bug #65947 (basename is no more working after fgetcsv in certain situation).
json:
fixed whitespace part of #64874 (json_decode handles whitespace and case-sensitivity incorrectly).
mysqli:
fixed bug #66043 (segfault calling bind_param() on mysqli).
mysqlnd:
fixed bug #66124 (mysqli under mysqlnd loses precision when bind_param with 'i').
fixed bug #66141 (mysqlnd quote function is wrong with no_backslash_escapes after failed query).
openssl:
fixed memory corruption in openssl_x509_parse() (cve-2013-6420). (stefan esser).
pdo:
fixed bug #65946 (sql_parser permanently converts values bound to strings).
version 5.3.28
12-dec-2013
openssl:
fixed handling null bytes in subjectaltname (cve-2013-4073).
fixed memory corruption in openssl_x509_parse() (cve-2013-6420). (stefan esser).
下载：
http://cn2.php.net/distributions/php-5.5.7.tar.bz2
http://cn2.php.net/distributions/php-5.4.23.tar.bz2
http://cn2.php.net/distributions/php-5.3.28.tar.bz2
------解决方案--------------------
更新的也太快了点吧
------解决方案--------------------
------解决方案--------------------
不是吧！前几天刚把php5.5.6安装上去...看来这次漏洞还不小，紧急发布
------解决方案--------------------
愁苦,那麼多服務器咋更新啊....
------解决方案--------------------
圣诞节前最后一版。
------解决方案--------------------
生产环境还是5.2.17 不准备升级 稳定才是王道
------解决方案--------------------
紧急更新。。。
------解决方案--------------------
5.3比5.2快10倍
5.4比5.3快10倍
引用:生产环境还是5.2.17 不准备升级 稳定才是王道
------解决方案--------------------
引用:5.3比5.2快10倍
5.4比5.3快10倍
quote: 引用:
生产环境还是5.2.17 不准备升级 稳定才是王道
对于一般站点来说，这10倍基本上是感觉不出来的，并且还要承担不稳定的风险，还不如优化一下缓存收益高。
------解决方案--------------------
fixed whitespace part of #64874 (json_decode handles whitespace and case-sensitivity incorrectly).
＝＝＝＝＝＝＝＝＝＝＝
这。。。难道是我上次遇到的那个问题。