Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.6

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

  • PHP 5.6.6 (tar.bz2)

    • sha256: 09625c9b65e0c8198dc76995a35f0feec0e13ea4489526e64a00954b12adbb4c

  • PHP 5.6.6 (tar.gz)

    • sha256: 164fb27bab0a0ca4902bc67d5f5638e43466c88153aee3b54546d8ec682ec03b

  • PHP 5.6.6 (tar.xz)

    • sha256: b963b2d45baeebeeb421c05ee60889e87971e3e27a4be873d265fee3250fde20

Change Log

  • core

    • Removed support for multi-line headers, as the are deprecated by RFC 7230.
      Stas
    • Fixed bug #67068 (getClosure returns somethings that's not a closure).
      Danack at basereality dot com
    • Fixed bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone). (CVE-2015-0273)
      Stas
    • Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow).
      Stas
    • Fixed Bug #67988 (htmlspecialchars() does not respect default_charset specified by ini_set) (Yasuo)
    • Added NULL byte protection to exec, system and passthru.
      Yasuo

  • dba

    • Fixed bug #68711 (useless comparisons).
      bugreports at internot dot info

  • enchant

    • Fixed bug #68552 (heap buffer overflow in enchant_broker_request_dict()). (CVE-2014-9705)
      Antony

  • fileinfo

    • Fixed bug #68827 (Double free with disabled ZMM).
      Joshua Rogers
    • Fixed bug #67647 (Bundled libmagic 5.17 does not detect quicktime files correctly).
      Anatol
    • Fixed bug #68731 (finfo_buffer doesn't extract the correct mime with some gifs).
      Anatol

  • fpm

    • Fixed bug #66479 (Wrong response to FCGI_GET_VALUES).
      Frank Stolle
    • Fixed bug #68571 (core dump when webserver close the socket).
      redfoxli069 at gmail dot com
      Laruence

  • json

    • Fixed bug #50224 (json_encode() does not always encode a float as a float) by adding JSON_PRESERVE_ZERO_FRACTION.
      Juan Basso

  • libxml

    • Fixed bug #64938 (libxml_disable_entity_loader setting is shared between threads).
      Martin Jansen

  • mysqli

    • Fixed bug #68114 (linker error on some OS X machines with fixed width decimal support) (Keyur Govande)
    • Fixed bug #68657 (Reading 4 byte floats with Mysqli and libmysqlclient has rounding errors) (Keyur Govande)

  • opcache

    • Fixed bug with try blocks being removed when extended_info opcode generation is turned on.
      Laruence

  • pdo_mysql

    • Fixed bug #68750 (PDOMysql with mysqlnd does not allow the usage of named pipes).
      steffenb198 at aol dot com

  • phar

    • Fixed bug #68901 (use after free). (CVE-2015-2301)
      bugreports at internot dot info

  • pgsql

    • Fixed Bug #65199 (pg_copy_from() modifies input array variable) (Yasuo)

  • session

    • Fixed bug #68941 (mod_files.sh is a bash-script) (bugzilla at ii.nl, Yasuo)
    • Fixed Bug #66623 (no EINTR check on flock) (Yasuo)
    • Fixed bug #68063 (Empty session IDs do still start sessions) (Yasuo)

  • sqlite3

    • Fixed bug #68260 (SQLite3Result::fetchArray declares wrong required_num_args).
      Julien

  • standard

    • Fixed bug #65272 (flock() out parameter not set correctly in windows).
      Daniel Lowrey
    • Fixed bug #69033 (Request may get env. variables from previous requests if PHP works as FastCGI).
      Anatol

  • streams

    • Fixed bug which caused call after final close on streams filter.
      Bob

PHP 5.6


  Represents a security release