Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.6 » 5.6.40 »

PHP 5.6.9

PHP 5.6 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.6 is 5.6.40.

Source Code

  • PHP 5.6.9 (tar.bz2)

    • sha256: 19d3b87b7b8bba3be24cf6d757d16b723a98881c3af8d15469fd25501e9abcb9

  • PHP 5.6.9 (tar.gz)

    • sha256: 49527ba66357fe65bcd463dfb8dcff1b8879419f88b3c334f50696a2aceacb87

  • PHP 5.6.9 (tar.xz)

    • sha256: 1fac497b596f5e4e87d87a7ca90f8725e39a8ca3f9d7adb500fa83c4bb70a73f

Change Log

  • core

    • Fixed bug #69467 (Wrong checked for the interface by using Trait).
      Laruence
    • Fixed bug #69420 (Invalid read in zend_std_get_method).
      Laruence
    • Fixed bug #60022 ("use statement [...] has no effect" depends on leading backslash).
      Nikita
    • Fixed bug #67314 (Segmentation fault in gc_remove_zval_from_buffer).
      Dmitry
    • Fixed bug #68652 (segmentation fault in destructor).
      Dmitry
    • Fixed bug #69419 (Returning compatible sub generator produces a warning).
      Nikita
    • Fixed bug #69472 (php_sys_readlink ignores misc errors from GetFinalPathNameByHandleA).
      Jan Starke
    • Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability). (CVE-2015-4024)
      Stas
    • Fixed bug #69403 (str_repeat() sign mismatch based memory corruption).
      Stas
    • Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)
      Stas
    • Fixed bug #69522 (heap buffer overflow in unpack()).
      Stas

  • ftp

    • Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4022)
      Stas

  • odbc

    • Fixed bug #69354 (Incorrect use of SQLColAttributes with ODBC 3.0).
      Anatol
    • Fixed bug #69474 (ODBC: Query with same field name from two tables returns incorrect result).
      Anatol
    • Fixed bug #69381 (out of memory with sage odbc driver).
      Frederic Marchall
      Anatol Belski

  • openssl

    • Fixed bug #69402 (Reading empty SSL stream hangs until timeout).
      Daniel Lowrey

  • pcntl

    • Fixed bug #68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)
      Stas

  • phar

    • Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename starts with null). (CVE-2015-4021)
      Stas

PHP 5.6


  Represents a security release