PHP Release 5.5.34


    PHP 5.5.34 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.5.34. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.5.34 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.34 (tar.bz2)
    SHA256: af88884416a92619de842ad0fd23f7f7e8140efb0b9194f98a38a78781e5851c
    PHP 5.5.34 (tar.gz)
    SHA256: 0e573b406441294b233e35e1f2e12d7896d68457e3e10bf6e1f4825e75271cca
    PHP 5.5.34 (tar.xz)
    SHA256: 6989a4f9900e6ddec7248790449bbb4aa55728730bff4973acb49d236c9e9e2a
    Change Logs
    fileinfo
    • Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file). (CVE-2015-8865)
    mbstring
    • Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in mbfl_strcut). (CVE-2016-4073)
    odbc
    • Fixed bug #71860 (Invalid memory write in phar on filename with \0 in name). (CVE-2016-4072)
    snmp
    • Fixed bug #71704 (php_snmp_error() Format String Vulnerability). (CVE-2016-4071)
    standard
    • Fixed bug #71798 (Integer Overflow in php_raw_url_encode). (CVE-2016-4070)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top