Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.31

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

Change Log

  • core

    • Fixed bug #73807 (Performance problem with processing post request over 2000000 chars).
      Nikita
    • Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize).
      Nikita
    • Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
      Stas
    • Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()).
      Derick
  • gd

    • Fixed bug #74435 (Buffer over-read into uninitialized memory).
      cmb
  • mbstring

    • Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)
  • openssl

    • Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
      Stas
  • pcre

    • Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
      Stas
  • wddx

    • Fixed bug #74145 (wddx parsing empty boolean tag leads to SIGSEGV).
      Stas

PHP 5.6


  Represents a security release