Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.5 » 5.5.38 »

PHP 5.5.23

PHP 5.5 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.5 is 5.5.38.

Source Code

Change Log

  • core

    • Fixed bug #69174 (leaks when unused inner class use traits precedence).
      Laruence
    • Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize).
      Laruence
    • Fixed bug #69121 (Segfault in get_current_user when script owner is not in passwd with ZTS build).
      dan at syneto dot net
    • Fixed bug #65593 (Segfault when calling ob_start from output buffering callback).
      Mike
    • Fixed bug #69017 (Fail to push to the empty array with the constant value defined in class scope).
      Laruence
    • Fixed bug #68986 (pointer returned by php_stream_fopen_temporary_file not validated in memory.c).
      nayana at ddproperty dot com
    • Fixed bug #68166 (Exception with invalid character causes segv).
      Rasmus
    • Fixed bug #69141 (Missing arguments in reflection info for some builtin functions).
      kostyantyn dot lysyy at oracle dot com
    • Fixed bug #68976 (Use After Free Vulnerability in unserialize()). (CVE-2015-2787)
      Stas
    • Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options).
      Anatol Belski
    • Fixed bug #69207 (move_uploaded_file allows nulls in path). (CVE-2015-2348)
      Stas

  • cgi

    • Fixed bug #69015 (php-cgi's getopt does not see $argv).
      Laruence

  • cli

    • Fixed bug #67741 (auto_prepend_file messes up __LINE__).
      Reeze Xia

  • curl

    • Fixed bug #69088 (PHP_MINIT_FUNCTION does not fully initialize cURL on Win32).
      Grant Pannell
    • Add CURLPROXY_SOCKS4A and CURLPROXY_SOCKS5_HOSTNAME constants if supported by libcurl.
      Linus Unneback

  • ereg

    • Fixed bug #69248 (heap overflow vulnerability in regcomp.c). (CVE-2015-2305)
      Stas

  • fpm

    • Fixed bug #68822 (request time is reset too early).
      honghu069 at 163 dot com

  • odbc

    • Fixed bug #68964 (Allowed memory size exhausted with odbc_exec).
      Anatol

  • opcache

    • Fixed bug #69125 (Array numeric string as key).
      Laruence
    • Fixed bug #69038 (switch(SOMECONSTANT) misbehaves).
      Laruence

  • openssl

    • Fixed bugs #61285, #68329, #68046, #41631 (encrypted streams don't observe socket timeouts).
      Brad Broerman

  • pgsql

    • Fixed bug #68638 (pg_update() fails to store infinite values).
      william dot welter at 4linux dot com dot br
      Laruence

  • readline

    • Fixed bug #69054 (Null dereference in readline_(read|write)_history() without parameters).
      Laruence

  • soap

    • Fixed bug #69085 (SoapClient's __call() type confusion through unserialize()).
      CVE-2015-4147
      CVE-2015-4148) (andrea dot palazzo at truel dot it
      Laruence

  • spl

    • Fixed bug #69108 ("Segmentation fault" when (de)serializing SplObjectStorage).
      Laruence
    • Fixed bug #68557 (RecursiveDirectoryIterator::seek(0) broken after calling getChildren()).
      Julien

  • zip

    • Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap boundary). (CVE-2015-2331)
      Stas

PHP 5.5


  Represents a security release