PHP Release 5.6.12


    PHP 5.6.12 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.12. 12 security-related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.12 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.12 (tar.bz2)
    SHA256: 6f27104272af7b2a996f85e4100fac627630fbdaf39d7bd263f16cf529c8853a
    PHP 5.6.12 (tar.gz)
    SHA256: 7799b42606c1770d1ad90bfc7521d2b6c294c4c27dcf1a206dee562533b4f984
    PHP 5.6.12 (tar.xz)
    SHA256: f8a8446866c0dc3f33319aa196ce87b64d71cab3dd96e39c8816adccc7e8ef33
    Change Logs
    core
    • Fixed bug #70012 (Exception lost with nested finally block).
    • Fixed bug #70002 (TS issues with temporary dir handling).
    • Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls).
    • Fixed bug #69892 (Different arrays compare indentical due to integer key truncation).
    • Fixed bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref).
    cli server
    • Fixed bug #69655 (php -S changes MKCALENDAR request method to MKCOL).
    • Fixed bug #64878 (304 responses return Content-Type header).
    gd
    • Fixed bug #53156 (imagerectangle problem with point ordering).
    • Fixed bug #66387 (Stack overflow with imagefilltoborder). (CVE-2015-8874)
    • Fixed bug #70102 (imagecreatefromwebm() shifts colors).
    • Fixed bug #66590 (imagewebp() doesn't pad to even length).
    • Fixed bug #66882 (imagerotate by -90 degrees truncates image by 1px).
    • Fixed bug #70064 (imagescale(..., IMG_BICUBIC) leaks memory).
    • Fixed bug #69024 (imagescale segfault with palette based image).
    • Fixed bug #53154 (Zero-height rectangle has whiskers).
    • Fixed bug #67447 (imagecrop() add a black line when cropping).
    • Fixed bug #68714 (copy 'n paste error).
    • Fixed bug #66339 (PHP segfaults in imagexbm).
    • Fixed bug #70047 (gd_info() doesn't report WebP support).
    odbc
    • Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns). (CVE-2015-8879)
    openssl
    • Fixed bug #69882 (OpenSSL error "key values mismatch" after openssl_pkcs12_read with extra cert).
    • Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically secure). (CVE-2015-8867)
    phar
    • Improved fix for bug #69441.
    • Fixed bug #70019 (Files extracted from archive may be placed outside of destination directory). (CVE-2015-6833)
    soap
    • Fixed bug #70081 (SoapClient info leak / null pointer dereference via multiple type confusions).
    spl
    • Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject items). (CVE-2015-6832)
    • Fixed bug #70166 (Use After Free Vulnerability in unserialize() with SPLArrayObject). (CVE-2015-6831)
    • Fixed bug #70168 (Use After Free Vulnerability in unserialize() with SplObjectStorage). (CVE-2015-6831)
    • Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList). (CVE-2015-6831)
    standard
    • Fixed bug #70096 (Repeated iptcembed() adds superfluous FF bytes).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top