PHP Release 5.5.25


    PHP 5.5.25 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.5.25. Several bugs have been fixed. All PHP 5.5 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.5.25 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.25 (tar.bz2)
    SHA256: 68df37e725ddd05675c0df906041038127938ecc52113a54d10e1e4029262c63
    PHP 5.5.25 (tar.gz)
    SHA256: c9397f60bff139e0df441c5e2766108c5bc7ad690de136eb9f5b2f9bbf771240
    PHP 5.5.25 (tar.xz)
    SHA256: ac10015dddfc103b58ccc949504bd50f0d79d0abe74a0cc7842251af06ce8b07
    Change Logs
    core
    • Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability). (CVE-2015-4024)
    • Fixed bug #69403 (str_repeat() sign mismatch based memory corruption).
    • Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)
    • Fixed bug #69522 (heap buffer overflow in unpack()).
    • Fixed bug #69467 (Wrong checked for the interface by using Trait).
    • Fixed bug #69420 (Invalid read in zend_std_get_method).
    • Fixed bug #60022 ("use statement [...] has no effect" depends on leading backslash).
    • Fixed bug #67314 (Segmentation fault in gc_remove_zval_from_buffer).
    • Fixed bug #68652 (segmentation fault in destructor).
    • Fixed bug #69419 (Returning compatible sub generator produces a warning).
    • Fixed bug #69472 (php_sys_readlink ignores misc errors from GetFinalPathNameByHandleA).
    ftp
    • Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4022)
    odbc
    • Fixed bug #69354 (Incorrect use of SQLColAttributes with ODBC 3.0).
    • Fixed bug #69474 (ODBC: Query with same field name from two tables returns incorrect result).
    • Fixed bug #69381 (out of memory with sage odbc driver).
    openssl
    • Fixed bug #69402 (Reading empty SSL stream hangs until timeout).
    pcntl
    • Fixed bug #68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)
    phar
    • Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename starts with null). (CVE-2015-4021)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top