Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.5

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

  • PHP 5.6.5 (tar.bz2)

    • sha256: adab4c0775512a5ca0ae74e08efdc941d92529b75283e0f44d3f53822cdfd06d

  • PHP 5.6.5 (tar.gz)

    • sha256: f67c480bcf2f6f703ec8d8a772540f4a518f766b08d634d7a919402c13a636cf

  • PHP 5.6.5 (tar.xz)

    • sha256: c5ef4abaef8c1ea66dcfd5a075a2f357b666aff5c5b686fca7c78c1cfd64e996

Change Log

  • core

    • Upgraded crypt_blowfish to version 1.3.
      Leigh
    • Fixed bug #60704 (unlink() bug with some files path).
    • Fixed bug #65419 (Inside trait, self::class != __CLASS__).
      Julien
    • Fixed bug #68536 (pack for 64bits integer is broken on bigendian).
      Remi
    • Fixed bug #55541 (errors spawn MessageBox, which blocks test automation).
      Anatol
    • Fixed bug #68297 (Application Popup provides too few information).
      Anatol
    • Fixed bug #65769 (localeconv() broken in TS builds).
      Anatol
    • Fixed bug #65230 (setting locale randomly broken).
      Anatol
    • Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR correctly).
      Ferenc
    • Fixed bug #68583 (Crash in timeout thread).
      Anatol
    • Fixed bug #65576 (Constructor from trait conflicts with inherited constructor).
      dunglas at gmail dot com
    • Fixed bug #68676 (Explicit Double Free). (CVE-2014-9425)
      Kalle
    • Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()). (CVE-2015-0231)
      Stefan Esser

  • cgi

    • Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
      Stas

  • cli server

    • Fixed bug #68745 (Invalid HTTP requests make web server segfault).
      Adam

  • curl

    • Fixed bug #67643 (curl_multi_getcontent returns '' when CURLOPT_RETURNTRANSFER isn't set).
      Jille Timmermans

  • date

    • Implemented FR #68268 (DatePeriod: Getter for start date, end date and interval).
      Marc Bennewitz

  • exif

    • Fixed bug #68799: Free called on uninitialized pointer. (CVE-2015-0232)
      Stas

  • fileinfo

    • Fixed bug #68398 (msooxml matches too many archives).
      Anatol
    • Fixed bug #68665 (invalid free in libmagic).
      Joshua Rogers
      Anatol Belski
    • Fixed bug #68671 (incorrect expression in libmagic).
      Joshua Rogers
      Anatol Belski
    • Removed readelf.c and related code from libmagic sources (Remi, Anatol)
    • Fixed bug #68735 (fileinfo out-of-bounds memory access). (CVE-2014-9652)
      Anatol

  • fpm

    • Fixed request #68526 (Implement POSIX Access Control List for UDS).
      Remi
    • Fixed bug #68751 (listen.allowed_clients is broken).
      Remi

  • gd

    • Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (CVE-2014-9709)
      Jan Bee
      Remi
    • Fixed request #68656 (Report gd library version).
      Remi

  • mbstring

    • Fixed bug #68504 (--with-libmbfl configure option not present on Windows).
      Ashesh Vashi

  • opcache

    • Fixed bug #68644 (strlen incorrect : mbstring + func_overload=2 +UTF-8 + Opcache).
      Laruence
    • Fixed bug #67111 (Memory leak when using "continue 2" inside two foreach loops).
      Nikita

  • openssl

    • Improved handling of OPENSSL_KEYTYPE_EC keys.
      Dominic Luechinger

  • pcntl

    • Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler when setting SIG_DFL).
      Julien

  • pcre

    • Fixed bug #66679 (Alignment Bug in PCRE 8.34 upstream).
      Rainer Jung
      Anatol Belski

  • pgsql

    • Fixed bug #68697 (lo_export return -1 on failure).
      Ondřej Surý

  • pdo

    • Fixed bug #68371 (PDO#getAttribute() cannot be called with platform-specifi attribute names).
      Matteo

  • pdo_mysql

    • Fixed bug #68424 (Add new PDO mysql connection attr to control multi statements option).
      peter dot wolanin at acquia dot com

  • spl

    • Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME breaks the RecursiveIterator).
      Paul Garvin
    • Fixed bug #68479 (Added escape parameter to SplFileObject::fputcsv).
      Salathe

  • sqlite

    • Fixed bug #68120 (Update bundled libsqlite to 3.8.7.2).
      Anatol

  • streams

    • Fixed bug #68532 (convert.base64-encode omits padding bytes).
      blaesius at krumedia dot de

PHP 5.6


  Represents a security release