Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.12

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

Change Log

  • core

    • Fixed bug #70012 (Exception lost with nested finally block).
      Laruence
    • Fixed bug #70002 (TS issues with temporary dir handling).
      Anatol
    • Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls).
      Stas
    • Fixed bug #69892 (Different arrays compare indentical due to integer key truncation).
      Nikita
    • Fixed bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref).
      Stas

  • cli server

    • Fixed bug #69655 (php -S changes MKCALENDAR request method to MKCOL).
      cmb
    • Fixed bug #64878 (304 responses return Content-Type header).
      cmb

  • gd

    • Fixed bug #53156 (imagerectangle problem with point ordering).
      cmb
    • Fixed bug #66387 (Stack overflow with imagefilltoborder). (CVE-2015-8874)
      cmb
    • Fixed bug #70102 (imagecreatefromwebm() shifts colors).
      cmb
    • Fixed bug #66590 (imagewebp() doesn't pad to even length).
      cmb
    • Fixed bug #66882 (imagerotate by -90 degrees truncates image by 1px).
      cmb
    • Fixed bug #70064 (imagescale(..., IMG_BICUBIC) leaks memory).
      cmb
    • Fixed bug #69024 (imagescale segfault with palette based image).
      cmb
    • Fixed bug #53154 (Zero-height rectangle has whiskers).
      cmb
    • Fixed bug #67447 (imagecrop() add a black line when cropping).
      cmb
    • Fixed bug #68714 (copy 'n paste error).
      cmb
    • Fixed bug #66339 (PHP segfaults in imagexbm).
      cmb
    • Fixed bug #70047 (gd_info() doesn't report WebP support).
      cmb

  • odbc

    • Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns). (CVE-2015-8879)
      cmb

  • openssl

    • Fixed bug #69882 (OpenSSL error "key values mismatch" after openssl_pkcs12_read with extra cert).
      Tomasz Sawicki
    • Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically secure). (CVE-2015-8867)
      Stas

  • phar

    • Improved fix for bug #69441.
      Anatol Belski
    • Fixed bug #70019 (Files extracted from archive may be placed outside of destination directory). (CVE-2015-6833)
      Anatol Belski

  • soap

    • Fixed bug #70081 (SoapClient info leak / null pointer dereference via multiple type confusions).
      Stas

  • spl

    • Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject items). (CVE-2015-6832)
      sean.heelan
    • Fixed bug #70166 (Use After Free Vulnerability in unserialize() with SPLArrayObject). (CVE-2015-6831)
      taoguangchen at icloud dot com
    • Fixed bug #70168 (Use After Free Vulnerability in unserialize() with SplObjectStorage). (CVE-2015-6831)
      taoguangchen at icloud dot com
    • Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList). (CVE-2015-6831)
      taoguangchen at icloud dot com

  • standard

    • Fixed bug #70096 (Repeated iptcembed() adds superfluous FF bytes).
      cmb

PHP 5.6


  Represents a security release