你应该及时更新PHP到5.3.5及5.2.17

netroby

前段时间更新的php 5.3.4和5.2.16有一个比较严重的BUG，请大家及时更新至新版PHP.如果你使用了DotDeb的源，可以直接更新。
下面引用DotDeb官方公告： http://www.dotdeb.org/2011/01/07/you-really-should-upgrade-to-php-5-3-5-or-5-2-17/
A few days after releasing PHP 5.3.4 and PHP 5.2.16, the PHP group  announced an important security update with PHP 5.3.5 and PHP 5.2.17 :
This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause  the PHP interpreter to hang on systems using x87 FPU registers.
The problem is known to only affect x86 32-bit PHP processes,  regardless of whether the system hosting PHP is 32-bit or 64-bit. You  can test whether your system is affected by running this script from the command line.
All users of PHP are strongly advised to update to these versions immediately.
The Dotdeb packages for Debian “Lenny” 5.0 are now available. You really should upgrade.

杯具

一般php都用5.2的。5.3新版本还有些兼容性的问题。

sbbaa

己经注了dotdeb官网的原文链接，dotdeb的源，请参考其官网的指导。

netroby

更新要小心，程序写得不好会出来很多警告

李院长

symfony 2.0正式发布前暂不考虑5.3

Kokgog

php 5.3似乎目前尚不兼容zend optimizer,所以现在用5.2.17和5.2.18

yculer

各位都不仔细看，5.2.x也有这个问题

msxcms

没必要，某些浮点运算有BUG，你难道做大型项目么

dianso

user input一直是5.3.3中，litespeed搭配很给力。

msxcms小夜

保存为hangs.php
在浏览器执行 hangs.php?a=2.2250738585072011e-308
可重现用户输入利用此漏洞

很多这种类似代码的程序，利用此法应该可以致使服务器拜拜

[ 本帖最后由 msxcms 于 2011-1-7 20:24 编辑 ]