PHP Release 5.5.22


    PHP 5.5.22 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.5.22. This release fixes several bugs and addresses CVE-2015-0235 and CVE-2015-0273. All PHP 5.5 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.5.22 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.22 (tar.bz2)
    SHA256: c218c184bef2905bc79fcdda6040f3d1738261395fb706396935d1c6f6e162bb
    PHP 5.5.22 (tar.gz)
    SHA256: cb6174e1e74de233ec7b461302f823a7eacf7bcc946d347486c930e53f2b7db7
    PHP 5.5.22 (tar.xz)
    SHA256: 5256a7e3999eb11f8b4b407408ea4780f60aa959e0c48cfcf376091e721df223
    Change Logs
    core
    • Removed support for multi-line headers, as the are deprecated by RFC 7230.
    • Fixed bug #67068 (getClosure returns somethings that's not a closure).
    • Fixed bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone). (CVE-2015-0273)
    • Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow).
    • Added NULL byte protection to exec, system and passthru.
    date
    • Fixed bug #45081 (strtotime incorrectly interprets SGT time zone).
    dba
    • Fixed bug #68711 (useless comparisons).
    enchant
    • Fixed bug #68552 (heap buffer overflow in enchant_broker_request_dict()). (CVE-2014-9705)
    fileinfo
    • Fixed bug #68827 (Double free with disabled ZMM).
    fpm
    • Fixed bug #66479 (Wrong response to FCGI_GET_VALUES).
    • Fixed bug #68571 (core dump when webserver close the socket).
    libxml
    • Fixed bug #64938 (libxml_disable_entity_loader setting is shared between threads).
    pdo_mysql
    • Fixed bug #68750 (PDOMysql with mysqlnd does not allow the usage of named pipes).
    phar
    • Fixed bug #68901 (use after free). (CVE-2015-2301)
    pgsql
    • Fixed Bug #65199 'pg_copy_from() modifies input array variable).
    sqlite3
    • Fixed bug #68260 (SQLite3Result::fetchArray declares wrong required_num_args).
    mysqli
    • Fixed bug #68114 (linker error on some OS X machines with fixed width decimal support)
    • Fixed bug #68657 (Reading 4 byte floats with Mysqli and libmysqlclient has rounding errors)
    session
    • Fixed bug #68941 (mod_files.sh is a bash-script)
    • Fixed Bug #66623 (no EINTR check on flock)
    • Fixed bug #68063 (Empty session IDs do still start sessions)
    standard
    • Fixed bug #65272 (flock() out parameter not set correctly in windows).
    • Fixed bug #69033 (Request may get env. variables from previous requests if PHP works as FastCGI).
    streams
    • Fixed bug which caused call after final close on streams filter.
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top