PHP Release 5.6.31


    PHP 5.6.31 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.31. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.31 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.31 (tar.bz2)
    SHA256: 8f397169cb65f0539f3bcb04060f97770d73e19074a37bd2c58b98ebf6ecb10f
    PHP 5.6.31 (tar.gz)
    SHA256: 6687ed2f09150b2ad6b3780ff89715891f83a9c331e69c90241ef699dec4c43f
    PHP 5.6.31 (tar.xz)
    SHA256: c464af61240a9b7729fabe0314cdbdd5a000a4f0c9bd201f89f8628732fe4ae4
    Change Logs
    core
    • Fixed bug #73807 (Performance problem with processing post request over 2000000 chars).
    • Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize).
    • Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
    • Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()).
    gd
    • Fixed bug #74435 (Buffer over-read into uninitialized memory).
    mbstring
    • Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229)
    openssl
    • Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
    pcre
    • Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
    wddx
    • Fixed bug #74145 (wddx parsing empty boolean tag leads to SIGSEGV).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top