PHP Release 5.6.30


PHP 5.6.30 Release Announcement

The PHP development team announces the immediate availability of PHP 5.6.30. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

According to our release calendar, this PHP 5.6 version is the last planned release that contains regular bugfixes. All the consequent releases will contain only security-relevant fixes, for the term of two years. PHP 5.6 users that need further bugfixes are encouraged to upgrade to PHP 7.

For source downloads of PHP 5.6.30 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 5.6.30 (tar.bz2)
SHA256: a105c293fa1dbff118b5b0ca74029e6c461f8c78f49b337a2a98be9e32c27906
PHP 5.6.30 (tar.gz)
SHA256: 8bc7d93e4c840df11e3d9855dcad15c1b7134e8acf0cf3b90b932baea2d0bde2
PHP 5.6.30 (tar.xz)
SHA256: a363185c786432f75e3c7ff956b49c3369c3f6906a6b10459f8d1ddc22f70805
Change Logs
exif
  • Fixed bug #73737 (FPE when parsing a tag format).
gd
  • Fixed bug #73549 (Use after free when stream is passed to imagepng).
  • Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()).
  • Fixed bug #73869 (Signed Integer Overflow gd_io.c).
intl
  • Fixed bug #68447 (grapheme_extract take an extra trailing character).
phar
  • Fixed bug #73764 (Crash while loading hostile phar archive).
  • Fixed bug #73768 (Memory corruption when loading hostile phar).
  • Fixed bug #73773 (Seg fault when loading hostile phar).
sqlite3
  • Reverted fix for bug #73530 (Unsetting result set may reset other result set).
standard
  • Fixed bug #70213 (Unserialize context shared on double class lookup).
  • Fixed bug #73825 (Heap out of bounds read on unserialize in finish_nested_data()).
To Top