PHP 5.5 is no longer officially supported by the PHP project.
Official support refers to that provided direct by the PHP Project.
If you install PHP via third-party packages, support timelines may be different.
Please read the Release Support Policy for more information.
The latest release of PHP 5.5 is
5.5.38.
Source Code
Change Log
-
core
-
Fixed bug
#70172 (Use After Free Vulnerability in unserialize()). (CVE-2015-6834)
-
Fixed bug
#70219 (Use after free vulnerability in session deserializer). (CVE-2015-6835)
taoguangchen at icloud dot com
-
exif
-
Fixed bug
#70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).
-
hash
-
Fixed bug
#70312 (HAVAL gives wrong hashes in specific cases).
letsgolee at naver dot com
-
pcre
-
Fixed bug
#70345 (Multiple vulnerabilities related to PCRE functions).
-
soap
-
Fixed bug
#70388 (SOAP serialize_function_call() type confusion / RCE). (CVE-2015-6836)
-
spl
-
Fixed bug
#70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage). (CVE-2015-6834)
taoguangchen at icloud dot com
-
Fixed bug
#70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList). (CVE-2015-6834)
taoguangchen at icloud dot com
-
xslt
-
Fixed bug
#69782 (NULL pointer dereference).
CVE-2015-6837
CVE-2015-6838) (Stas
-
zip
-
Fixed bug
#70350 (ZipArchive::extractTo allows for directory traversal when creating directories). (CVE-2014-9767)