PHP 发布了两个更新版本，分别是 5.5.32 和 5.6.18 。改进内容如下；

5.6.18:

• Core:
  • Fixed bug #71039 (exec functions ignore length but look for NULL termination).
  • Fixed bug #71089 (No check to duplicate zend_extension).
  • Fixed bug #71201 (round() segfault on 64-bit builds).
  • Added support for new HTTP 451 code.
  • Fixed bug #71273 (A wrong ext directory setup in php.ini leads to crash).
  • Fixed bug #71323 (Output of stream_get_meta_data can be falsified by its input).
  • Fixed bug #71459 (Integer overflow in iptcembed()).
• Apache2handler:
  • Fix >2G Content-Length headers in apache2handler.
• FTP:
  • Implemented FR #55651 (Option to ignore the returned FTP PASV address).
• Opcache:
  • Fixed bug #71127 (Define in auto_prepend_file is overwrite).
  • Fixed bug #71024 (Unable to use PHP 7.0 x64 side-by-side with PHP 5.6 x32 on the same server).
• PCRE:
  • Upgraded bundled PCRE library to 8.38.
• Phar:
  • Fixed bug #71354 (Heap corruption in tar/zip/phar parser).
  • Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
  • Fixed bug #71488 (Stack overflow when decompressing tar archives).
• Session:
  • Fixed bug #69111 (Crash in SessionHandler::read()).
• SOAP:
  • Fixed bug #70979 (crash with bad soap request).
• SPL:
  • Fixed bug #71204 (segfault if clean spl_autoload_funcs while autoloading).
• WDDX:
  • Fixed bug #71335 (Type Confusion in WDDX Packet Deserialization).

5.5.32:

• Core:
  • Fixed bug #71039 (exec functions ignore length but look for NULL termination).
  • Fixed bug #71323 (Output of stream_get_meta_data can be falsified by its input).
  • Fixed bug #71459 (Integer overflow in iptcembed()).
• GD:
  • Improved the fix for bug #70976.
• PCRE:
  • Upgraded pcrelib to 8.38.
• Phar:
  • Fixed bug #71354 (Heap corruption in tar/zip/phar parser).
  • Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
  • Fixed bug #71488 (Stack overflow when decompressing tar archives).
• WDDX:
  • Fixed bug #71335 (Type Confusion in WDDX Packet Deserialization).