PHP Release 5.5.13


    PHP 5.5.13 Release Announcement

    The PHP Development Team announces the immediate availability of PHP 5.5.13. This release fixes several bugs against PHP 5.5.12, and addresses several CVEs in Fileinfo (CVE-2014-0238 and CVE-2014-0237).

    All PHP users are encouraged to upgrade to this new version.

    For source downloads of PHP 5.5.13, please visit our downloads page. Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.13 (tar.bz2)
    SHA256: e58a4a754eb18d2d8b1a120cad5cce4ed24a7db5d49eca5830a40e4c8ca78b9c
    PHP 5.5.13 (tar.gz)
    SHA256: 15e34eb7c45e66963cbece29fb41e53cc6c6e3ec4a54c291a53cf6a1527771b6
    Change Logs
    cli server
    • Fixed bug #67079 (Missing MIME types for XML/XSL files).
    com
    • Fixed bug #66431 (Special Character via COM Interface (CP_UTF8)).
    core
    • Fixed bug #65701 (copy() doesn't work when destination filename is created by tempnam()).
    • Fixed bug #67072 (Echoing unserialized "SplFileObject" crash).
    • Fixed bug #67245 (usage of memcpy() with overlapping src and dst in zend_exceptions.c).
    • Fixed bug #67247 (spl_fixedarray_resize integer overflow).
    • Fixed bug #67249 (printf out-of-bounds read).
    • Fixed bug #67250 (iptcparse out-of-bounds read).
    • Fixed bug #67252 (convert_uudecode out-of-bounds read).
    curl
    • Fixed bug #64247 (CURLOPT_INFILE doesn't allow reset).
    date
    • Fixed bug #67118 (DateTime constructor crash with invalid data).
    • Fixed bug #67251 (date_parse_from_format out-of-bounds read).
    • Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read).
    dom
    • Fixed bug #67081 (DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset).
    fileinfo
    • Fixed bug #66307 (Fileinfo crashes with powerpoint files).
    • Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS) .
    • Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in performance degradation) .
    fpm
    • Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor).
    gd
    • Fixed bug #67248 (imageaffinematrixget missing check of parameters).
    pcre
    • Fixed bug #67238 (Ungreedy and min/max quantifier bug, applied patch from the upstream).
    phar
    • Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent in its name).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top