PHP5.5.35 released, security patch version

PHP5.5.35 and PHP 5.5.35 are released. this is a security patch version that fixes many security-related problems. we recommend that you upgrade PHP 5.5 as soon as possible.

For source code download, visit downloads page. for Windows binary, download windows.php.net/download /.

For the complete improvement record, see ChangeLog.

• Core:

• Fixed bug #69537 (_ debugInfo with empty string for key gives error ).

• Fixed bug #71841 (EG (error_zval) is not handled well ).

• BCmath:

• Fixed bug #72093 (bcpowmod accepts negative scale and merge UPTs _ one _ definition ).

• Curl:

• Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string ).

• Date:

• Fixed bug #71889 (DateInterval: format Segmentation fault ).

• EXIF:

• Fixed bug #72094 (Out of bounds heap read access in exif header processing ).

• GD:

• Fixed bug #71952 (Upload uption inside imageaffinematrixget ).

• Fixed bug #71912 (libgd: signedness vulnerability ).

• Intl:

• Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative offset ).

• OCI8:

• Fixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for this column ).

• ODBC:

• Fixed bug #63171 (Script hangs after max_execution_time ).

• Opcache:

• Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER ).

• PDO:

• Fixed bug #52098 (Own PDOStatement implementation ignore _ call ()).

• Fixed bug #71447 (Quotes inside comments not properly handled ).

• Postgres:

• Fixed bug #71820 (pg_fetch_object binds parameters before call constructor ).

• SPL:

• Fixed bug #67582 (Cloned SplObjectStorage with overwritten getHash fails offsetExists ()).

• Standard:

• Fixed bug #71840 (Unserialize accepts wrongly data ).

• Fixed bug #67512 (php_crypt () crashes if crypt_r () does not exist or _ REENTRANT is not defined ).

• XML:

• Fixed bug #72099 (xml_parse_into_struct segmentation fault ).