PHP Release 5.5.11


    PHP 5.5.11 Release Announcement

    The PHP Development Team announces the immediate availability of PHP 5.5.11. This release fixes several bugs against PHP 5.5.10, as well as CVE-2013-7345 regarding Fileinfo

    All PHP users are encouraged to upgrade to this new version.

    For source downloads of PHP 5.5.11, please visit our downloads page. Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.11 (tar.bz2)
    SHA256: 60e14c255f2a461a7a26639b84a2fc448cc2f91c8dead0e9fd00cd8ba27a2e96
    PHP 5.5.11 (tar.gz)
    SHA256: a8b7bb1049732bf806e94090661f39f8359e0bf36d59ce6b98a53ea80411b450
    Change Logs
    core
    • Allow zero length comparison in substr_compare()
    • Fixed bug #60602 (proc_open() changes environment array)
    spl
    • Added feature #65545 (SplFileObject::fread())
    • Fixed bug #66702 (RegexIterator::INVERT_MATCH does not invert).
    curl
    • Fixed bug #66109 (Can't reset CURLOPT_CUSTOMREQUEST to default behaviour)
    • Fix compilation on libcurl versions between 7.10.5 and 7.12.2, inclusive.
    fileinfo
    • Fixed bug #66946i (fileinfo: extensive backtracking in awk rule regular expression). (CVE-2013-7345)
    fpm
    • Added clear_env configuration directive to disable clearenv() call.
    gd
    • Fixed bug #66714 (imageconvolution breakage).
    • Fixed bug #66869 (Invalid 2nd argument crashes imageaffinematrixget)
    • Fixed bug #66887 (imagescale - poor quality of scaled image).
    • Fixed bug #66890 (imagescale segfault).
    • Fixed bug #66893 (imagescale ignore method argument).
    hash
    • hash_pbkdf2() now works correctly if the $length argument is not specified.
    intl
    • Fixed bug #66873 (A reproductible crash in UConverter when given invalid encoding)
    mail
    • Fixed bug #66535 (Don't add newline after X-PHP-Originating-Script)
    mysqli
    • Fixed bug #66762 (Segfault in mysqli_stmt::bind_result() when link closed)
    • OPCache
    • Added function opcache_is_script_cached().
    • Added information about interned strings usage.
    openssl
    • Fixed bug #66833 (Default disgest algo is still MD5, switch to SHA1).
    • GMP
    • Fixed bug #66872 (invalid argument crashes gmp_testbit)
    sqlite
    • Updated bundled libsqlite to 3.8.3.1
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top