PHP Release 5.6.14


    PHP 5.6.14 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.14. This is a security release. Two security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.14 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.14 (tar.bz2)
    SHA256: 36f295f11641c1839a5df00e693f685fd134c65e8a1d46e8ee0abae8662b2eb0
    PHP 5.6.14 (tar.gz)
    SHA256: 29baf7ffca644f7f8e86028c40275b9e460342bdf9562d45f8f0498899cb738d
    PHP 5.6.14 (tar.xz)
    SHA256: c8edf6b05fd8a69ebd88d90c5c0975ee168502204622ad5cfcd550bc222632d9
    Change Logs
    core
    • Fixed bug #70370 (Bundled libtool.m4 doesn't handle FreeBSD 10 when building extensions).
    cli server
    • Fixed bug #68291 (404 on urls with '+').
    dom
    • Fixed bug #70001 (Assigning to DOMNode::textContent does additional entity encoding).
    ldap
    • Fixed bug #70465 (Bug in ldap_search() modifies LDAP_OPT_TIMELIMIT/DEREF's values).
    • Fixed bug #69574 (ldap timeouts not enforced).
    mysqlnd
    • Fixed bug #70456 (mysqlnd doesn't activate TCP keep-alive when connecting to a server).
    openssl
    • Fixed bug #55259 (openssl extension does not get the DH parameters from DH key resource).
    • Fixed bug #70395 (Missing ARG_INFO for openssl_seal()).
    • Fixed bug #60632 (openssl_seal fails with AES).
    • Fixed bug #68312 (Lookup for openssl.cnf causes a message box).
    pdo
    • Fixed bug #70389 (PDO constructor changes unrelated variables).
    phar
    • Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()). (CVE-2015-7803)
    • FIxed bug #70433 (Uninitialized pointer in phar_make_dirstream when zip entry filename is "/"). (CVE-2015-7804)
    phpdbg
    • Fix phpdbg_break_next() sometimes not breaking.
    standard
    • Fixed bug #67131 (setcookie() conditional for empty values not met).
    streams
    • Fixed bug #70361 (HTTP stream wrapper doesn't close keep-alive connections).
    zip
    • Fixed bug #70322 (ZipArchive::close() doesn't indicate errors).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top