Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.5 » 5.5.38 »

PHP 5.5.21

PHP 5.5 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.5 is 5.5.38.

Source Code

Change Log

  • core

    • Upgraded crypt_blowfish to version 1.3.
      Leigh
    • Fixed bug #60704 (unlink() bug with some files path).
    • Fixed bug #65419 (Inside trait, self::class != __CLASS__).
      Julien
    • Fixed bug #65576 (Constructor from trait conflicts with inherited constructor).
      dunglas at gmail dot com
    • Fixed bug #55541 (errors spawn MessageBox, which blocks test automation).
      Anatol
    • Fixed bug #68297 (Application Popup provides too few information).
      Anatol
    • Fixed bug #65769 (localeconv() broken in TS builds).
      Anatol
    • Fixed bug #65230 (setting locale randomly broken).
      Anatol
    • Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR correctly).
      Ferenc
    • Fixed bug #68583 (Crash in timeout thread).
      Anatol
    • Fixed bug #68676 (Explicit Double Free). (CVE-2014-9425)
      Kalle
    • Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()). (CVE-2015-0231)
      Stefan Esser

  • cgi

    • Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
      Stas

  • cli server

    • Fixed bug #68745 (Invalid HTTP requests make web server segfault).
      Adam

  • curl

    • Fixed bug #67643 (curl_multi_getcontent returns '' when CURLOPT_RETURNTRANSFER isn't set).
      Jille Timmermans

  • exif

    • Fixed bug #68799 (Free called on uninitialized pointer). (CVE-2015-0232)
      Stas

  • fileinfo

    • Fixed bug #68671 (incorrect expression in libmagic).
      Joshua Rogers
      Anatol Belski
    • Removed readelf.c and related code from libmagic sources (Remi, Anatol)
    • Fixed bug #68735 (fileinfo out-of-bounds memory access). (CVE-2014-9652)
      Anatol

  • fpm

    • Fixed bug #68751 (listen.allowed_clients is broken).
      Remi

  • gd

    • Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (CVE-2014-9709)
      Jan Bee
      Remi

  • mbstring

    • Fixed bug #68504 (--with-libmbfl configure option not present on Windows).
      Ashesh Vashi

  • mcrypt

    • Fixed possible read after end of buffer and use after free.
      Dmitry

  • opcache

    • Fixed bug #67111 (Memory leak when using "continue 2" inside two foreach loops).
      Nikita

  • openssl

    • Fixed bug #55618 (use case-insensitive cert name matching).
      Daniel Lowrey

  • pcntl

    • Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler when setting SIG_DFL).
      Julien

  • pcre

    • Fixed bug #66679 (Alignment Bug in PCRE 8.34 upstream).
      Rainer Jung
      Anatol Belski

  • pgsql

    • Fixed bug #68697 (lo_export return -1 on failure).
      Ondřej Surý

  • pdo

    • Fixed bug #68371 (PDO#getAttribute() cannot be called with platform-specific attribute names).
      Matteo

  • pdo_mysql

    • Fixed bug #68424 (Add new PDO mysql connection attr to control multi statements option).
      peter dot wolanin at acquia dot com

  • spl

    • Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME breaks the RecursiveIterator).
      Paul Garvin
    • Fixed bug #65213 (cannot cast SplFileInfo to boolean) (Tjerk)
    • Fixed bug #68479 (Added escape parameter to SplFileObject::fputcsv).
      Salathe

  • sqlite

    • Fixed bug #68120 (Update bundled libsqlite to 3.8.7.2).
      Anatol

  • streams

    • Fixed bug #68532 (convert.base64-encode omits padding bytes).
      blaesius at krumedia dot de

PHP 5.5


  Represents a security release