PHP Release 5.6.37


    PHP 5.6.37 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.37. This is a security release. Several security bugs have been fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.37 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.37 (tar.bz2)
    SHA256: 886ad63d05d94ea3e54322691aadea0cf1d4bcdb4450b02fe300e5b570788b23
    PHP 5.6.37 (tar.gz)
    SHA256: b7ec077f35ef3a8cdd33c29124140b1761111a1429878b4c463bb20d2a31b184
    PHP 5.6.37 (tar.xz)
    SHA256: 5000d82610f9134aaedef28854ec3591f68dedf26a17b8935727dac2843bd256
    Change Logs
    exif
    • Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c).
    • Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data).
    • Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value).
    win32
    • Fixed bug #76459 (windows linkinfo lacks openbasedir check).
    iconv
    • Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on invalid sequence).
    ldap
    • Fixed bug #76248 (Malicious LDAP-Server Response causes Crash).
    phar
    • Fixed bug #76129 (fix for CVE-2018-5712 may not be complete).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top