PHP Release 5.5.36


    PHP 5.5.36 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.5.36. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.5.36 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.5.36 (tar.bz2)
    SHA256: 2484edfaa3de606d74f927b55c5206f51b1ae24ea8e428aa9fc15474c7bb71bb
    PHP 5.5.36 (tar.gz)
    SHA256: ef829f9a9600a858e2363533b80c4e4773505bdc8ea3692d703fc893f267728a
    PHP 5.5.36 (tar.xz)
    SHA256: e1bbe33d6b4da66b15c483131520a9fc505eeb6629fa70c5cfba79590a1d0801
    Change Logs
    core
    • Fixed bug #72114 (Integer underflow / arbitrary null write in fread/gzread). (CVE-2016-5096)
    • Fixed bug #72135 (Integer Overflow in php_html_entities). (CVE-2016-5094)
    gd
    • Fixed bug #72227 (imagescale out-of-bounds read). (CVE-2013-7456)
    intl
    • Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (CVE-2016-5093)
    phar
    • Fixed bug #71331 (Uninitialized pointer in phar_make_dirstream()). (CVE-2016-4343)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top