PHP Release 5.6.21


    PHP 5.6.21 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.21. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.21 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.21 (tar.bz2)
    SHA256: b4ed7ab574b689fd6d6494fde954826c06efc85c505e017b8d776c7c7f479590
    PHP 5.6.21 (tar.gz)
    SHA256: 5997668c1f6f2d86a59cf75cc86b4a94687884614dec481fad7e13a76b70fcd5
    PHP 5.6.21 (tar.xz)
    SHA256: 566ff1a486cb0485ed477a91ea292423f77a58671270ff73b74e67e3ce7084f9
    Change Logs
    core
    • Fixed bug #69537 (__debugInfo with empty string for key gives error).
    • Fixed bug #71841 (EG(error_zval) is not handled well).
    bcmath
    • Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition).
    curl
    • Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string).
    date
    • Fixed bug #71889 (DateInterval::format Segmentation fault).
    exif
    • Fixed bug #72094 (Out of bounds heap read access in exif header processing).
    gd
    • Fixed bug #71952 (Corruption inside imageaffinematrixget).
    • Fixed bug #71912 (libgd: signedness vulnerability). (CVE-2016-3074)
    intl
    • Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative offset).
    oci8
    • Fixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for this column).
    odbc
    • Fixed bug #63171 (Script hangs after max_execution_time).
    opcache
    • Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER).
    pdo
    • Fixed bug #52098 (Own PDOStatement implementation ignore __call()).
    • Fixed bug #71447 (Quotes inside comments not properly handled).
    postgres
    • Fixed bug #71820 (pg_fetch_object binds parameters before call constructor).
    spl
    • Fixed bug #67582 (Cloned SplObjectStorage with overwritten getHash fails offsetExists()).
    standard
    • Fixed bug #71840 (Unserialize accepts wrongly data).
    • Fixed bug #67512 (php_crypt() crashes if crypt_r() does not exist or _REENTRANT is not defined).
    xml
    • Fixed bug #72099 (xml_parse_into_struct segmentation fault).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top