Everything

php

PHP 5.5.28

PHP 5.5 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.5 is 5.5.38.

Source Code

PHP 5.5.28 (tar.bz2)
- sha256: 197d2c572e030c177e53d3763d59ac6d363d7c78dc22e6cc1e2ac65573d9c2f3
PHP 5.5.28 (tar.gz)
- sha256: 6084f25a39ab2f79ade46bf0258a1cd6c9bbb09a106b40dd996dbdf8cd3b08f2
PHP 5.5.28 (tar.xz)
- sha256: d060455c804c622cda9f3f5f084b10c6ceba73ee76c1720897e17137a0f75ecd

core
- Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls).
  
  Stas
- Fixed bug #69892 (Different arrays compare indentical due to integer key truncation).
  
  Nikita
- Fixed bug #70002 (TS issues with temporary dir handling).
  
  Anatol
- Fixed bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref).
  
  Stas
openssl
- Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically secure). (CVE-2015-8867)
  
  Stas
phar
- Improved fix for bug #69441.
  
  Anatol Belski
- Fixed bug #70019 (Files extracted from archive may be placed outside of destination directory). (CVE-2015-6833)
  
  Anatol Belski
soap
- Fixed bug #70081 (SoapClient info leak / null pointer dereference via multiple type confusions).
  
  Stas
spl
- Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject items). (CVE-2015-6832)
  
  sean.heelan
- Fixed bug #70166 (Use After Free Vulnerability in unserialize() with SPLArrayObject). (CVE-2015-6831)
  
  taoguangchen at icloud dot com
- Fixed bug #70168 (Use After Free Vulnerability in unserialize() with SplObjectStorage). (CVE-2015-6831)
  
  taoguangchen at icloud dot com
- Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList). (CVE-2015-6831)
  
  taoguangchen at icloud dot com

Represents a security release