Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.10

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

Change Log

  • core

    • Fixed bug #66048 (temp. directory is cached during multiple requests).
      Julien
    • Fixed bug #69566 (Conditional jump or move depends on uninitialised value in extension trait).
      jbboehr at gmail dot com
    • Fixed bug #69599 (Strange generator+exception+variadic crash).
      Nikita
    • Fixed bug #69628 (complex GLOB_BRACE fails on Windows).
      Christoph M. Becker
    • Fixed POST data processing slowdown due to small input buffer size on Windows.
      Jorge Oliveira
      Anatol
    • Fixed bug #69646 (OS command injection vulnerability in escapeshellarg). (CVE-2015-4642)
      Anatol Belski
    • Fixed bug #69719 (Incorrect handling of paths with NULs). (CVE-2015-4598)
      Stas

  • ftp

    • Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4643)
      Max Spelsberg

  • gd

    • Fixed bug #69479 (GD fails to build with newer libvpx).
      Remi

  • iconv

    • Fixed bug #48147 (iconv with //IGNORE cuts the string).
      Stas

  • litespeed sapi

    • Fixed bug #68812 (Unchecked return value).
      George Wang

  • mail

    • Fixed bug #68776 (mail() does not have mail header injection prevention for additional headers).
      Yasuo

  • mcrypt

    • Added file descriptor caching to mcrypt_create_iv() (Leigh)

  • opcache

    • Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF).
      Laruence
      Dmitry

  • pcre

    • Upgraded pcrelib to 8.37.
      CVE-2015-2325
      CVE-2015-2326

  • phar

    • Fixed bug #69680 (phar symlink in binary directory broken).
      Matteo Bernardini
      Remi

  • postgres

    • Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644)
      Remi

  • sqlite3

    • Upgrade bundled sqlite to 3.8.10.2.
      CVE-2015-3414
      CVE-2015-3415
      CVE-2015-3416) (Kaplan

PHP 5.6


  Represents a security release