Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.11

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

Change Log

  • core

    • Fixed bug #69768 (escapeshell*() doesn't cater to !).
      cmb
    • Fixed bug #69703 (Use __builtin_clzl on PowerPC).
      dja at axtens dot net
      Kalle
    • Fixed bug #69732 (can induce segmentation fault with basic php code).
      Dmitry
    • Fixed bug #69642 (Windows 10 reported as Windows 8).
      Christian Wenz
      Anatol Belski
    • Fixed bug #69551 (parse_ini_file() and parse_ini_string() segmentation fault).
      Christoph M. Becker
    • Fixed bug #69781 (phpinfo() reports Professional Editions of Windows 7/8/8.1/10 as "Business").
      Christian Wenz
    • Fixed bug #69740 (finally in generator (yield) swallows exception in iteration).
      Nikita
    • Fixed bug #69835 (phpinfo() does not report many Windows SKUs).
      Christian Wenz
    • Fixed bug #69892 (Different arrays compare indentical due to integer key truncation).
      Nikita
    • Fixed bug #69874 (Can't set empty additional_headers for mail()), regression from fix to bug #68776.
      Yasuo

  • gd

    • Fixed bug #61221 (imagegammacorrect function loses alpha channel).
      cmb

  • gmp

    • Fixed bug #69803 (gmp_random_range() modifies second parameter if GMP number).
      Nikita

  • mysqlnd

    • Fixed bug #69669 (mysqlnd is vulnerable to BACKRONYM). (CVE-2015-3152)
      Andrey

  • pcre

    • Fixed Bug #53823 (preg_replace: * qualifier on unicode replace garbles the string).
      cmb
    • Fixed bug #69864 (Segfault in preg_replace_callback) (cmb, ab)

  • pdo_pgsql

    • Fixed bug #69752 (PDOStatement::execute() leaks memory with DML Statements when closeCuror() is u).
      Philip Hofstetter
    • Fixed bug #69362 (PDO-pgsql fails to connect if password contains a leading single quote).
      Matteo
    • Fixed bug #69344 (PDO PgSQL Incorrect binding numeric array with gaps).
      Matteo

  • phar

    • Fixed bug #69958 (Segfault in Phar::convertToData on invalid file). (CVE-2015-5589)
      Stas
    • Fixed bug #69923 (Buffer overflow and stack smashing error in phar_fix_filepath). (CVE-2015-5590)
      Stas

  • simplexml

    • Refactored the fix for bug #66084 (simplexml_load_string() mangles empty node name).
      Christoph Michael Becker

  • spl

    • Fixed bug #69737 (Segfault when SplMinHeap::compare produces fatal error).
      Stas
    • Fixed bug #67805 (SplFileObject setMaxLineLength). (Willian Gustavo Veiga).
    • Fixed bug #69970 (Use-after-free vulnerability in spl_recursive_it_move_forward_ex()).
      Laruence

  • sqlite3

    • Fixed bug #69972 (Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk()).
      Laruence

PHP 5.6


  Represents a security release