Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.2

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

  • PHP 5.6.2 (tar.bz2)

    • sha256: 671dcf1f636410c63bb9eb015c4c180d904f5436f81217be0adbf52da9becdb5
  • PHP 5.6.2 (tar.gz)

    • sha256: 4bb316831979317caf738bb9e2c590bf3b7951ce60c69b9ca33f26069d9a2f39
  • PHP 5.6.2 (tar.xz)

    • sha256: 9be1322d33520fb2164282fb0fcdc212f66ffedcd912bff60955d5696454fe39

Change Log

  • core

    • Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)
      Stas
  • curl

    • Fixed bug #68089 (NULL byte injection - cURL lib).
      Stas
  • exif

    • Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
      Stas
  • xmlrpc

    • Fixed bug #68027 (Global buffer overflow in mkgmtime() function). (CVE-2014-3668)
      Stas

PHP 5.6


  Represents a security release