PHP Release 5.6.28


    PHP 5.6.28 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.28. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.28 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.28 (tar.bz2)
    SHA256: c55ea3f4aad5a0b65631d01c4468930fd981ad208ffcd242acdf731bcb47548f
    PHP 5.6.28 (tar.gz)
    SHA256: 27a47ac15e0868d51181d3909cfe3c63ae9b643a3ab40dc30a75b5b500bce500
    PHP 5.6.28 (tar.xz)
    SHA256: 07187ba2870f89cef334cd2ad6cb801aeec5eaf283da0293a9a6be75d6786d11
    Change Logs
    core
    • Fixed bug #73337 (try/catch not working with two exceptions inside a same operation).
    bz2
    • Fixed bug #73356 (crash in bzcompress function).
    • Fixed bug #73213 (Integer overflow in imageline() with antialiasing).
    • Fixed bug #73272 (imagescale() is not affected by, but affects imagesetinterpolation()).
    • Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()).
    • Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf).
    • Fixed bug #72482 (Illegal write/read access caused by gdImageAALine overflow).
    • Fixed bug #72696 (imagefilltoborder stackoverflow on truecolor images).
    imap
    • Fixed bug #73418 (Integer Overflow in "_php_imap_mail" leads Heap Overflow).
    spl
    • Fixed bug #73144 (Use-after-free in ArrayObject Deserialization).
    soap
    • Fixed bug #73037 (SoapServer reports Bad Request when gzipped).
    sqlite3
    • Fixed bug #73333 (2147483647 is fetched as string).
    standard
    • Fixed bug #73203 (passing additional_parameters causes mail to fail).
    • Fixed bug #73188 (use after free in userspace streams).
    • Fixed bug #73192 (parse_url return wrong hostname).
    wddx
    • Fixed bug #73331 (NULL Pointer Dereference in WDDX Packet Deserialization with PDORow).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top