PHP Release 5.5.32


    PHP 5.5.32 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.5.32. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.5.32 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.32 (tar.bz2)
    SHA256: b0f2c108db8e05db9f6366aaba9a754fd0ee31f3f86ee889561b608dfd6e92ee
    PHP 5.5.32 (tar.gz)
    SHA256: 419aa62a68a640192799928a29e5cd4cd5b965458223bea2b3209a68c3e95989
    PHP 5.5.32 (tar.xz)
    SHA256: 02f569dcf5bd57dd5e390ddcab8609e3957a698e2db0b793cf2c11a7e33743c9
    Change Logs
    core
    • Fixed bug #71039 (exec functions ignore length but look for NULL termination).
    • Fixed bug #71323 (Output of stream_get_meta_data can be falsified by its input).
    • Fixed bug #71459 (Integer overflow in iptcembed()).
    gd
    • Improved the fix for bug #70976.
    pcre
    • Upgraded pcrelib to 8.38.
    phar
    • Fixed bug #71354 (Heap corruption in tar/zip/phar parser). (CVE-2016-4342)
    • Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
    • Fixed bug #71488 (Stack overflow when decompressing tar archives). (CVE-2016-2554)
    wddx
    • Fixed bug #71335 (Type Confusion in WDDX Packet Deserialization).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top