PHP Release 5.5.10


    PHP 5.5.10 Release Announcement

    The PHP Development Team announces the immediate availability of PHP 5.5.10. This release fixes several bugs against PHP 5.5.9, as well as CVE-2014-1943, CVE-2014-2270 and CVE-2013-7327

    All PHP users are encouraged to upgrade to this new version.

    For source downloads of PHP 5.5.10, please visit our downloads page. Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.10 (tar.bz2)
    SHA256: bb34e61f8e6f56c612867bfe85d144d5045cd5e44497539bc126a4e8c6795419
    PHP 5.5.10 (tar.gz)
    SHA256: abf751810593844e0897007797210828b193a213d9b204f203e0331019cadb90
    Change Logs
    core
    • Fixed Request #66574i (Allow multiple paths in php_ini_scanned_path).
    date
    • Fixed bug #45528 (Allow the DateTimeZone constructor to accept timezones per offset too).
    fileinfo
    • Bug #66731 (file: infinite recursion) (CVE-2014-1943).
    • Fixed bug #66820 (out-of-bounds memory access in fileinfo) (CVE-2014-2270).
    • GD
    • Fixed Bug #66815 (imagecrop(): insufficient fix for NULL defer CVE-2013-7327).
    json
    • Fixed bug #65753 (JsonSerializeable couldn't implement on module extension)
    ldap
    • Implemented ldap_modify_batch (https://wiki.php.net/rfc/ldap_modify_batch).
    openssl
    • Fixed bug #66501 (Add EC key support to php_openssl_is_private_key).
    pcre
    • Upgraded to PCRE 8.34.
    pgsql
    • Added warning for dangerous client encoding and remove possible injections for pg_insert()/pg_update()/pg_delete()/pg_select().
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top