PHP Release 5.6.3


    PHP 5.6.3 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.3. This release fixes several bugs and one CVE in the fileinfo extension. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.3 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.3 (tar.bz2)
    SHA256: 8986b20124d14430d795165e47801ef065a38d5855bea39d0d47b13ab9ad4009
    PHP 5.6.3 (tar.gz)
    SHA256: 7ac79fe7ef50c2d5893375f5d8854909337adf1632e42bb08b36b66a0d8016a7
    PHP 5.6.3 (tar.xz)
    SHA256: fad244506cc7f10fe56aba8129b3c39a4f9316d9544a4fba932c3f81fc2244b5
    Change Logs
    core
    • Implemented 64-bit format codes for pack() and unpack().
    • Fixed bug #51800 (proc_open on Windows hangs forever).
    • Fixed bug #67633 (A foreach on an array returned from a function not doing copy-on-write).
    • Fixed bug #67739 (Windows 8.1/Server 2012 R2 OS build number reported as 6.2 (instead of 6.3)).
    • Fixed bug #67949 (DOMNodeList elements should be accessible through array notation)
    • Fixed bug #68095 (AddressSanitizer reports a heap buffer overflow in php_getopt()).
    • Fixed bug #68118 ($a->foo .= 'test'; can leave $a->foo undefined).
    • Fixed bug #68129 (parse_url() - incomplete support for empty usernames and passwords)
    • Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in zend_hash_copy).
    curl
    • Add CURL_SSLVERSION_TLSv1_0, CURL_SSLVERSION_TLSv1_1, and CURL_SSLVERSION_TLSv1_2 constants if supported by libcurl
    fileinfo
    • Fixed bug #66242 (libmagic: don't assume char is signed).
    • Fixed bug #68224 (buffer-overflow in libmagic/readcdf.c caught by AddressSanitizer).
    • Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers). (CVE-2014-3710)
    fpm
    • Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable when using Apache, mod_proxy-fcgi and ProxyPass).
    • Implemented FR #55508 (listen and listen.allowed_clients should take IPv6 addresses).
    gd
    • Fixed bug #65171 (imagescale() fails without height param).
    gmp
    • Implemented gmp_random_range() and gmp_random_bits().
    • Fixed bug #63595 (GMP memory management conflicts with other libraries using GMP).
    mysqli
    • Fixed bug #68114 (linker error on some OS X machines with fixed width decimal support)
    odbc
    • Fixed bug #68087 (ODBC not correctly reading DATE column when preceded by a VARCHAR column)
    openssl
    • Fixed bug #68074 (Allow to use system cipher list instead of hardcoded value).
    • Revert regression introduced by fix of bug #41631
    pdo_pgsql
    • Fixed bug #68199 (PDO::pgsqlGetNotify doesn't support NOTIFY payloads)
    • Fixed bug #66584 (Segmentation fault on statement deallocation)
    reflection
    • Fixed bug #68103 (Duplicate entry in Reflection for class alias).
    spl
    • Fixed bug #68128 (Regression in RecursiveRegexIterator)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top