PHP Release 5.6.17


PHP 5.6.17 Release Announcement

The PHP development team announces the immediate availability of PHP 5.6.17. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

For source downloads of PHP 5.6.17 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 5.6.17 (tar.bz2)
SHA256: 77b45f56a1e63e75bb22b42cfb8b438ec4083c59ce774b4d7c1685544b7add3b
PHP 5.6.17 (tar.gz)
SHA256: f5036535651e919415f4b6589391c95e4ff48f2d391818251c45da216791aac8
PHP 5.6.17 (tar.xz)
SHA256: ea9d5749380c7c7171e131616466deacd7cb124b5010eafc34e551b0a7b0fb2c
Change Logs
core
  • Fixed bug #66909 (configure fails utf8_to_mutf7 test).
  • Fixed bug #70958 (Invalid opcode while using ::class as trait method paramater default value).
  • Fixed bug #70957 (self::class can not be resolved with reflection for abstract class).
  • Fixed bug #70944 (try{ } finally{} can create infinite chains of exceptions).
  • Fixed bug #61751 (SAPI build problem on AIX: Undefined symbol: php_register_internal_extensions).
fpm
  • Fixed bug #70755 (fpm_log.c memory leak and buffer overflow).
gd
  • Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index Out of Bounds). (CVE-2016-1903)
mysqlnd
  • Fixed bug #68077 (LOAD DATA LOCAL INFILE / open_basedir restriction).
soap
  • Fixed bug #70900 (SoapClient systematic out of memory error).
standard
  • Fixed bug #70960 (ReflectionFunction for array_unique returns wrong number of parameters).
pdo_firebird
  • Fixed bug #60052 (Integer returned as a 64bit integer on X64_86).
wddx
  • Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization).
  • Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion Vulnerability).
xmlrpc
  • Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker()).
To Top