PHP Release 5.5.18


PHP 5.5.18 Release Announcement

The PHP development team announces the immediate availability of PHP 5.5.18. Several bugs were fixed in this release. A regression in OpenSSL introduced in PHP 5.5.17 has also been addressed in this release. PHP 5.5.18 also fixes 4 CVEs in different components. All PHP 5.5 users are encouraged to upgrade to this version.

For source downloads of PHP 5.5.18 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 5.5.18 (tar.bz2)
SHA256: f974279927b72b672dda4ef4b4362b4847fd3d19ce1d4f2e982230a4e93bb842
PHP 5.5.18 (tar.gz)
SHA256: 71f6445cc21c944a3b98592193c62e29a58af3fe26d097312502b4fd400286e4
PHP 5.5.18 (tar.xz)
SHA256: ccfbf6af18d1e56145867454dcbc75d90512f40ee9d3e57fdc6cb5fe3fc9726e
Change Logs
core
  • Fixed bug #67985 (Incorrect last used array index copied to new array after unset).
  • Fixed bug #67739 (Windows 8.1/Server 2012 R2 OS build number reported as 6.2 (instead of 6.3)).
  • Fixed bug #67633 (A foreach on an array returned from a function not doing copy-on-write).
  • Fixed bug #51800 (proc_open on Windows hangs forever).
  • Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)
curl
  • Fixed bug #68089 (NULL byte injection - cURL lib).
exif
  • Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
fpm
  • Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable when using Apache, mod_proxy-fcgi and ProxyPass).
openssl
  • Revert regression introduced by fix of bug #41631
reflection
  • Fixed bug #68103 (Duplicate entry in Reflection for class alias).
session
  • Fixed bug #67972 (SessionHandler Invalid memory read create_sid()).
xmlrpc
  • Fixed bug #68027 (Global buffer overflow in mkgmtime() function). (CVE-2014-3668)
To Top