PHP Release 5.5.16


    PHP 5.5.16 Release Announcement

    The PHP Development Team announces the immediate availability of PHP 5.5.16. This release fixes several bugs against PHP 5.5.15 and resolves CVE-2014-3538, CVE-2014-3587, CVE-2014-2497, CVE-2014-5120 and CVE-2014-3597.

    All PHP users are encouraged to upgrade to this new version.

    For source downloads of PHP 5.5.16, please visit our downloads page. Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.16 (tar.bz2)
    SHA256: a1d7c4556a80bed744a348211b33bc35303edd56dd0a34e0a75a948c879cc5f6
    PHP 5.5.16 (tar.gz)
    SHA256: cdea80ab1b0466f4656b46155e341b700799e78569a5cc582eeaededb448086c
    PHP 5.5.16 (tar.xz)
    SHA256: 8276e8de4928e8e7011d1ac6c841c5adfc4561c7329ef2f5e055e7f4e1af0e48
    Change Logs
    com
    • Fixed missing type checks in com_event_sink .
    fileinfo
    • Fixed bug #67705 (extensive backtracking in rule regular expression). (CVE-2014-3538)
    • Fixed bug #67716 (Segfault in cdf.c). (CVE-2014-3587)
    fpm
    • Fixed bug #67635 (php links to systemd libraries without using pkg-config).
    gd
    • Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference). (CVE-2014-2497)
    • Fixed bug #67730 (Null byte injection possible with imagexxx functions). (CVE-2014-5120)
    milter
    • Fixed bug #67715 (php-milter does not build and crashes randomly).
    network
    • Fixed bug #67717 (segfault in dns_get_record). (CVE-2014-3597)
    openssl
    • Fixed missing type checks in OpenSSL options.
    readline
    • Fixed bug #55496 (Interactive mode doesn't force a newline before the prompt).
    • Fixed bug #67496 (Save command history when exiting interactive shell with control-c).
    sessions
    • Fixed missing type checks in php_session_create_id .
    core
    • Fixed bug #67693 (incorrect push to the empty array)
    odbc
    • Fixed bug #60616 (odbc_fetch_into returns junk data at end of multi-byte char fields).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top