Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.3

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

  • PHP 5.6.3 (tar.bz2)

    • sha256: 8986b20124d14430d795165e47801ef065a38d5855bea39d0d47b13ab9ad4009
  • PHP 5.6.3 (tar.gz)

    • sha256: 7ac79fe7ef50c2d5893375f5d8854909337adf1632e42bb08b36b66a0d8016a7
  • PHP 5.6.3 (tar.xz)

    • sha256: fad244506cc7f10fe56aba8129b3c39a4f9316d9544a4fba932c3f81fc2244b5

Change Log

  • core

    • Implemented 64-bit format codes for pack() and unpack().
      Leigh
    • Fixed bug #51800 (proc_open on Windows hangs forever).
      Anatol
    • Fixed bug #67633 (A foreach on an array returned from a function not doing copy-on-write).
      Nikita
    • Fixed bug #67739 (Windows 8.1/Server 2012 R2 OS build number reported as 6.2 (instead of 6.3)).
      Christian Wenz
    • Fixed bug #67949 (DOMNodeList elements should be accessible through array notation) (Florian)
    • Fixed bug #68095 (AddressSanitizer reports a heap buffer overflow in php_getopt()).
      Stas
    • Fixed bug #68118 ($a->foo .= 'test'; can leave $a->foo undefined).
      Nikita
    • Fixed bug #68129 (parse_url() - incomplete support for empty usernames and passwords) (Tjerk)
    • Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in zend_hash_copy).
      Dmitry
  • curl

    • Add CURL_SSLVERSION_TLSv1_0, CURL_SSLVERSION_TLSv1_1, and CURL_SSLVERSION_TLSv1_2 constants if supported by libcurl (Rasmus)
  • fileinfo

    • Fixed bug #66242 (libmagic: don't assume char is signed).
      ArdB
    • Fixed bug #68224 (buffer-overflow in libmagic/readcdf.c caught by AddressSanitizer).
      Remi
    • Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers). (CVE-2014-3710)
      Remi
  • fpm

    • Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable when using Apache, mod_proxy-fcgi and ProxyPass).
      Remi
    • Implemented FR #55508 (listen and listen.allowed_clients should take IPv6 addresses).
      Robin Gloster
  • gd

    • Fixed bug #65171 (imagescale() fails without height param).
      Remi
  • gmp

    • Implemented gmp_random_range() and gmp_random_bits().
      Leigh
    • Fixed bug #63595 (GMP memory management conflicts with other libraries using GMP).
      Remi
  • mysqli

    • Fixed bug #68114 (linker error on some OS X machines with fixed width decimal support) (Keyur Govande)
  • odbc

    • Fixed bug #68087 (ODBC not correctly reading DATE column when preceded by a VARCHAR column) (Keyur Govande)
  • openssl

    • Fixed bug #68074 (Allow to use system cipher list instead of hardcoded value).
      Remi
    • Revert regression introduced by fix of bug #41631
  • pdo_pgsql

    • Fixed bug #68199 (PDO::pgsqlGetNotify doesn't support NOTIFY payloads) (Matteo, Alain Laporte)
    • Fixed bug #66584 (Segmentation fault on statement deallocation) (Matteo)
  • reflection

    • Fixed bug #68103 (Duplicate entry in Reflection for class alias).
      Remi
  • spl

    • Fixed bug #68128 (Regression in RecursiveRegexIterator) (Tjerk)

PHP 5.6


  Represents a security release