PHP 5.6.5, 5.5.21, 5.4.37 released
- http://php.net/
22 Jan 2015
PHP 5.6.5
- http://php.net/archive/2015.php#id2015-01-22-2
The PHP development team announces the immediate availability of PHP 5.6.5. This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.6 users are encouraged to upgrade to this version…
Changelog: http://php.net/ChangeLog-5.php#5.6.5
PHP 5.4.37
- http://php.net/archive/2015.php#id2015-01-22-3
The PHP development team announces the immediate availability of PHP 5.4.37. Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. All PHP 5.4 users are encouraged to upgrade to this version…
Changelog: http://php.net/ChangeLog-5.php#5.4.37
- http://www.securitytracker.com/id/1031627
CVE Reference: CVE-2014-9427, CVE-2015-0231, CVE-2015-0232
Jan 24 2015
Impact: Denial of service via network, Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to versions 5.4.37, 5.5.21, 5.6.5 …
Solution: The vendor has issued a fix (5.4.37, 5.5.21, 5.6.5).
PHP 5.4.40
- http://php.net/archive/2015.php#id2015-04-16-3
16 Apr 2015 - "… immediate availability of PHP 5.4.40. 14 security-related bugs were fixed in this release, including CVE-2014-9709, CVE-2015-2301, CVE-2015-2783, CVE-2015-1352. All PHP 5.4 users are encouraged to upgrade to this version…"
- http://www.securitytracker.com/id/1032145
Apr 17 2015
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes…
Solution: The vendor has issued a fix (5.6.8RC1).
- http://www.securitytracker.com/id/1032146
CVE Reference: CVE-2015-2783
Apr 17 2015
Impact: Disclosure of system information
Fix Available: Yes Vendor Confirmed: Yes…
Solution: The vendor has issued a fix (5.6.8RC1).
PHP 5.6.10, 5.5.26, 5.4.42 released
- https://php.net/
11 Jun 2015
PHP 5.6.10
- https://php.net/archive/2015.php#id2015-06-11-2
"… immediate availability of PHP 5.6.10. Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.6 users are encouraged to upgrade to this version…"
ChangeLog: https://php.net/ChangeLog-5.php#5.6.10
PHP 5.5.26
- https://php.net/archive/2015.php#id2015-06-11-1
"… immediate availability of PHP 5.5.26. Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.5 users are encouraged to upgrade to this version…"
ChangeLog: http://www.php.net/ChangeLog-5.php#5.5.26
PHP 5.4.42
- https://php.net/archive/2015.php#id2015-06-11-4
"… immediate availability of PHP 5.4.42. Six security-related issues in PHP were fixed in this release, as well as several security issues in bundled sqlite library (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416). All PHP 5.4 users are encouraged to upgrade to this version…"
ChangeLog: https://php.net/ChangeLog-5.php#5.4.42
PHP 5.6.13, 5.5.29, 5.4.45 released
- https://secure.php.net/
4 Sep 2015
PHP 5.6.13
- https://secure.php.net/archive/2015.php#id2015-09-04-2
4 Sep 2015 - "The PHP development team announces the immediate availability of PHP 5.6.13. -11- security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version…"
PHP 5.5.29
- https://secure.php.net/archive/2015.php#id2015-09-04-3
4 Sep 2015 - "The PHP development team announces the immediate availability of PHP 5.5.29. This is a security release. Many security-related issues were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version…"
PHP 5.4.45
- https://secure.php.net/archive/2015.php#id2015-09-04-4
4 Sep 2015 - "The PHP development team announces the immediate availability of PHP 5.4.45. -Ten- security-related issues were fixed in this release. All PHP 5.4 users are encouraged to upgrade to this version…"
Windows binaries
- http://windows.php.net/download/
___
- http://www.securitytracker.com/id/1033548
CVE Reference: CVE-2015-6834, CVE-2015-6835, CVE-2015-6836, CVE-2015-6837, CVE-2015-6838
Sep 14 2015
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, User access via network
Fix Available: Yes Vendor Confirmed: Yes…
Solution: The vendor has issued a fix (5.4.45, 5.5.29, 5.6.13)…
PHP 5.6.15 released
- https://secure.php.net/
29 Oct 2015
PHP 5.6.15
- https://secure.php.net/archive/2015.php#id2015-10-29-2
29 Oct 2015 - "The PHP development team announces the immediate availability of PHP 5.6.15. Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version…"
PHP 5.6.16
- https://secure.php.net/archive/2015.php#id2015-11-26-2
26 Nov 2015 - "The PHP development team announces the immediate availability of PHP 5.6.16. Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version. …"
PHP 7.0.0 released
- https://secure.php.net/
3 Dec 2015 - "The PHP development team announces the immediate availability of PHP 7.0.0. This release marks the start of the new major PHP 7 series. PHP 7.0.0 comes with a new version of the Zend Engine, numerous improvements and new features such as:
> Improved performance: PHP 7 is up to -twice- as fast as PHP 5.6
> Significantly reduced memory usage…"
- https://secure.php.net/archive/2015.php#id2015-12-17-1
17 Dec 2015 - "The PHP development team announces the immediate availability of PHP 7.0.1. Several bugs have been fixed. All PHP 7.0 users are encouraged to upgrade to this version…"
