Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.18

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

Change Log

  • core

    • Fixed bug #71039 (exec functions ignore length but look for NULL termination).
      Anatol
    • Fixed bug #71089 (No check to duplicate zend_extension).
      Remi
    • Fixed bug #71201 (round() segfault on 64-bit builds).
      Anatol
    • Added support for new HTTP 451 code.
      Julien
    • Fixed bug #71273 (A wrong ext directory setup in php.ini leads to crash).
      Anatol
    • Fixed bug #71323 (Output of stream_get_meta_data can be falsified by its input).
      Leo Gaspard
    • Fixed bug #71459 (Integer overflow in iptcembed()).
      Stas

  • apache2handler

    • Fix >2G Content-Length headers in apache2handler.
      Adam Harvey

  • ftp

    • Implemented FR #55651 (Option to ignore the returned FTP PASV address).
      abrender at elitehosts dot com

  • opcache

    • Fixed bug #71127 (Define in auto_prepend_file is overwrite).
      Laruence
    • Fixed bug #71024 (Unable to use PHP 7.0 x64 side-by-side with PHP 5.6 x32 on the same server).
      Anatol

  • pcre

    • Upgraded bundled PCRE library to 8.38.
      CVE-2015-8383
      CVE-2015-8386
      CVE-2015-8387
      CVE-2015-8389
      CVE-2015-8390
      CVE-2015-8391
      CVE-2015-8393
      CVE-2015-8394

  • phar

    • Fixed bug #71354 (Heap corruption in tar/zip/phar parser). (CVE-2016-4342)
      Stas
    • Fixed bug #71331 (Uninitialized pointer in phar_make_dirstream()). (CVE-2016-4343)
      Stas
    • Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
      Stas
    • Fixed bug #71488 (Stack overflow when decompressing tar archives). (CVE-2016-2554)
      Stas

  • session

    • Fixed bug #69111 (Crash in SessionHandler::read()).
      Anatol

  • soap

    • Fixed bug #70979 (crash with bad soap request).
      Anatol

  • spl

    • Fixed bug #71204 (segfault if clean spl_autoload_funcs while autoloading).
      Laruence

  • wddx

    • Fixed bug #71335 (Type Confusion in WDDX Packet Deserialization).
      Stas

PHP 5.6


  Represents a security release