Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.5 » 5.5.38 »

PHP 5.5.2

PHP 5.5 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.5 is 5.5.38.

Source Code

Change Log

  • core

    • Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails).
      Laruence
    • Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey avp200681 gmail com).
    • Fixed bug #65304 (Use of max int in array_sum).
      Laruence
    • Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case).
      Arpad
    • Fixed bug #62691 (solaris sed has no -i switch).
      Chris Jones
    • Fixed bug #61345 (CGI mode - make install don't work).
      Michael Heimpold
    • Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d) (Chris Jones)

  • dom

    • Added flags option to DOMDocument::schemaValidate() and DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag.
      Chris Wright

  • opcache

    • Added opcache.restrict_api configuration directive that may limit usage of OPcache API functions only to particular script(s).
      Dmitry
    • Added support for glob symbols in blacklist entries (?, *, **).
      Terry Elison
      Dmitry
    • Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on shutdown).
      Dmitry

  • openssl

    • Fixed handling null bytes in subjectAltName (CVE-2013-4248).
      Christian Heimes

  • pdo_mysql

    • Fixed bug #65299 (pdo mysql parsing errors).
      Johannes

  • pgsql

    • Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()).
      Yasuo
    • Fixed bug #65336 (pg_escape_literal/identifier() scilently returns false).
      Yasuo

  • phar

    • Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents).
      Stas

  • sessions

    • Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions.
      CVE-2011-4718). (Yasuo Ohgaki
    • Fixed possible buffer overflow under Windows. Note: Not a security fix.
      Yasuo
    • Changed session.auto_start to PHP_INI_PERDIR.
      Yasuo

  • soap

    • Fixed bug #65018 (SoapHeader problems with SoapServer).
      Dmitry

  • spl

    • Fixed bug #65328 (Segfault when getting SplStack object Value).
      Laruence
    • Added RecursiveTreeIterator setPostfix and getPostifx methods.
      Joshua Thijssen
    • Fixed bug #61697 (spl_autoload_functions returns lambda functions incorrectly).
      Laruence

  • streams

    • Fixed bug #65268 (select() implementation uses outdated tick API).
      Anatol

PHP 5.5


  Represents a security release