Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.17

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

Change Log

  • core

    • Fixed bug #66909 (configure fails utf8_to_mutf7 test).
      Michael Orlitzky
    • Fixed bug #70958 (Invalid opcode while using ::class as trait method paramater default value).
      Laruence
    • Fixed bug #70957 (self::class can not be resolved with reflection for abstract class).
      Laruence
    • Fixed bug #70944 (try{ } finally{} can create infinite chains of exceptions).
      Laruence
    • Fixed bug #61751 (SAPI build problem on AIX: Undefined symbol: php_register_internal_extensions).
      Lior Kaplan
  • fpm

    • Fixed bug #70755 (fpm_log.c memory leak and buffer overflow).
      Stas
  • gd

    • Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index Out of Bounds). (CVE-2016-1903)
      emmanuel dot law at gmail dot com
  • mysqlnd

    • Fixed bug #68077 (LOAD DATA LOCAL INFILE / open_basedir restriction).
      Laruence
  • soap

    • Fixed bug #70900 (SoapClient systematic out of memory error).
      Dmitry
  • standard

    • Fixed bug #70960 (ReflectionFunction for array_unique returns wrong number of parameters).
      Laruence
  • pdo_firebird

    • Fixed bug #60052 (Integer returned as a 64bit integer on X64_86).
      Mariuz
  • wddx

    • Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization).
      taoguangchen at icloud dot com
    • Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion Vulnerability).
      taoguangchen at icloud dot com
  • xmlrpc

    • Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker()).
      Julien

PHP 5.6


  Represents a security release