PHP Release 5.5.26


    PHP 5.5.26 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.5.26. Several bugs have been fixed as well as several security issues into some bundled librairies (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.5 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.5.26 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.26 (tar.bz2)
    SHA256: 816afffdb03ff4c542bc172a2f77f9c69b817df82d60cce05c1b4f578c2c926e
    PHP 5.5.26 (tar.gz)
    SHA256: bee980d433bab99d07ee2bf6f2dcb87d746e49d57adec7d0ce7edb39306695ec
    PHP 5.5.26 (tar.xz)
    SHA256: 97672c41cf2f95628dbffb63648147b43b23ea41b99ad22ccf5f4fe9b6e91b51
    Change Logs
    core
    • Fixed bug #69566 (Conditional jump or move depends on uninitialised value in extension trait).
    • Fixed bug #66048 (temp. directory is cached during multiple requests).
    • Fixed bug #69628 (complex GLOB_BRACE fails on Windows).
    • Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4643)
    • Fixed bug #69646 (OS command injection vulnerability in escapeshellarg). (CVE-2015-4642)
    • Fixed bug #69719 (Incorrect handling of paths with NULs). (CVE-2015-4598)
    gd
    • Fixed bug #69479 (GD fails to build with newer libvpx).
    iconv
    • Fixed bug #48147 (iconv with //IGNORE cuts the string).
    litespeed sapi
    • Fixed bug #68812 (Unchecked return value).
    mail
    • Fixed bug #68776 (mail() does not have mail header injection prevention for additional headers).
    mcrypt
    • Added file descriptor caching to mcrypt_create_iv()
    pcre
    • Upgraded pcrelib to 8.37.
    phar
    • Fixed bug #69680 (phar symlink in binary directory broken).
    postgres
    • Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644)
    • Opcache
    • Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF).
    sqlite3
    • Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top