PHP Release 5.6.22


    PHP 5.6.22 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.22. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.22 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.22 (tar.bz2)
    SHA256: 90da8a80cc52fa699cf2bfa4c6fa737c772df7c92b81ef483460aa3b1e9f88c6
    PHP 5.6.22 (tar.gz)
    SHA256: 4ce0f58c3842332c4e3bb2ec1c936c6817294273abaa37ea0ef7ca2a68cf9b21
    PHP 5.6.22 (tar.xz)
    SHA256: c96980d7de1d66c821a4ee5809df0076f925b2fe0b8c362d234d92f2f0a178e2
    Change Logs
    core
    • Fixed bug #72172 (zend_hex_strtod should not use strlen).
    • Fixed bug #72114 (Integer underflow / arbitrary null write in fread/gzread). (CVE-2016-5096)
    • Fixed bug #72135 (Integer Overflow in php_html_entities). (CVE-2016-5094)
    gd
    • Fixed bug #72227 (imagescale out-of-bounds read). (CVE-2013-7456)
    • Intl
    • Fixed bug #64524 (Add intl.use_exceptions to php.ini-*).
    • Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (CVE-2016-5093)
    postgres
    • Fixed bug #72151 (mysqli_fetch_object changed behaviour).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top