PHP Release 5.5.29


    PHP 5.5.29 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.5.29. This is a security release. Many security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.5.29 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.29 (tar.bz2)
    SHA256: fbcee579ecc77cad6960a541116aee669cf145c2cd9a54bf60503a870843b946
    PHP 5.5.29 (tar.gz)
    SHA256: c25a4c4eae558cc9899d2994813dd272eafff9466926f30821a83edaafe620a9
    PHP 5.5.29 (tar.xz)
    SHA256: 22c72d1b88c8d9a8ab9ca565e9ca5844287c006134098805d9a373a862bbbcad
    Change Logs
    core
    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()). (CVE-2015-6834)
    • Fixed bug #70219 (Use after free vulnerability in session deserializer). (CVE-2015-6835)
    exif
    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).
    hash
    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).
    pcre
    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).
    soap
    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE). (CVE-2015-6836)
    spl
    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage). (CVE-2015-6834)
    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList). (CVE-2015-6834)
    xslt
    • Fixed bug #69782 (NULL pointer dereference). (CVE-2015-6837, CVE-2015-6838)
    zip
    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories). (CVE-2014-9767)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top