PHP Release 5.6.2


    PHP 5.6.2 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.2. Four security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.2 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.2 (tar.bz2)
    SHA256: 671dcf1f636410c63bb9eb015c4c180d904f5436f81217be0adbf52da9becdb5
    PHP 5.6.2 (tar.gz)
    SHA256: 4bb316831979317caf738bb9e2c590bf3b7951ce60c69b9ca33f26069d9a2f39
    PHP 5.6.2 (tar.xz)
    SHA256: 9be1322d33520fb2164282fb0fcdc212f66ffedcd912bff60955d5696454fe39
    Change Logs
    core
    • Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)
    curl
    • Fixed bug #68089 (NULL byte injection - cURL lib).
    exif
    • Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
    xmlrpc
    • Fixed bug #68027 (Global buffer overflow in mkgmtime() function). (CVE-2014-3668)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top