PHP Release 5.6.10


    PHP 5.6.10 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.10. Several bugs have been fixed as well as several security issues into some bundled librairies (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.10 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.10 (tar.bz2)
    SHA256: 0a579c81c724ea41815eee0caa8ea7d8eeb302458519d8cc4fc5b055577c8c45
    PHP 5.6.10 (tar.gz)
    SHA256: 7759d6e178be524085e1482921748c14d11cbd0a133ba8aabb96c391ce7ed3fc
    PHP 5.6.10 (tar.xz)
    SHA256: 1af720c955b0a57aa47606e928616e84c78868aff2a5f269c70601a77d6da8c1
    Change Logs
    core
    • Fixed bug #66048 (temp. directory is cached during multiple requests).
    • Fixed bug #69566 (Conditional jump or move depends on uninitialised value in extension trait).
    • Fixed bug #69599 (Strange generator+exception+variadic crash).
    • Fixed bug #69628 (complex GLOB_BRACE fails on Windows).
    • Fixed POST data processing slowdown due to small input buffer size on Windows.
    • Fixed bug #69646 (OS command injection vulnerability in escapeshellarg). (CVE-2015-4642)
    • Fixed bug #69719 (Incorrect handling of paths with NULs). (CVE-2015-4598)
    • FTP
    • Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4643)
    gd
    • Fixed bug #69479 (GD fails to build with newer libvpx).
    iconv
    • Fixed bug #48147 (iconv with //IGNORE cuts the string).
    litespeed sapi
    • Fixed bug #68812 (Unchecked return value).
    mail
    • Fixed bug #68776 (mail() does not have mail header injection prevention for additional headers).
    mcrypt
    • Added file descriptor caching to mcrypt_create_iv()
    • Opcache
    • Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF).
    • PCRE
    • Upgraded pcrelib to 8.37.
    phar
    • Fixed bug #69680 (phar symlink in binary directory broken).
    postgres
    • Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644)
    sqlite3
    • Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top