PHP Release 5.6.4


    PHP 5.6.4 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.4. This release fixes several bugs and one CVE related to unserialization. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.4 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.4 (tar.bz2)
    SHA256: 576f9001b612f5ddc22f447311bbec321e2c959b6a52259d664c4ba04ef044f1
    PHP 5.6.4 (tar.gz)
    SHA256: 9c318f10af598e3d0b306a00860cfeb13c34024a9032a59ff53e3cd3c7791e97
    PHP 5.6.4 (tar.xz)
    SHA256: 8cf44c59f467cdc2dd76c1167d1f368575ccff9b12941e199a362eb44a79acea
    Change Logs
    core
    • Fixed bug #68091 (Some Zend headers lack appropriate extern "C" blocks).
    • Fixed bug #68104 (Segfault while pre-evaluating a disabled function).
    • Fixed bug #68185 ("Inconsistent insteadof definition."- incorrectly triggered).
    • Fixed bug #68355 (Inconsistency in example php.ini comments).
    • Fixed bug #68370 ("unset($this)" can make the program crash).
    • Fixed bug #68422 (Incorrect argument reflection info for array_multisort()).
    • Fixed bug #68545 (NULL pointer dereference in unserialize.c).
    • Fixed bug #68446 (Array constant not accepted for array parameter default).
    • Fixed bug #68594 (Use after free vulnerability in unserialize()). (CVE-2014-8142)
    date
    • Fixed day_of_week function as it could sometimes return negative values internally.
    fpm
    • Fixed bug #68381 (fpm_unix_init_main ignores log_level).
    • Fixed bug #68420 (listen=9000 listens to ipv6 localhost instead of all addresses).
    • Fixed bug #68421 (access.format='%R' doesn't log ipv6 address).
    • Fixed bug #68423 (PHP-FPM will no longer load all pools).
    • Fixed bug #68428 (listen.allowed_clients is IPv4 only).
    • Fixed bug #68452 (php-fpm man page is oudated).
    • Fixed request #68458 (Change pm.start_servers default warning to notice).
    • Fixed bug #68463 (listen.allowed_clients can silently result in no allowed access).
    • Fixed request #68391 (php-fpm conf files loading order).
    • Fixed bug #68478 (access.log don't use prefix).
    mcrypt
    • Fixed possible read after end of buffer and use after free.
    gmp
    • Fixed bug #68419 (build error with gmp 4.1).
    pdo_pgsql
    • Fixed bug #67462 (PDO_PGSQL::beginTransaction() wrongly throws exception when not in transaction)
    • Fixed bug #68351 (PDO::PARAM_BOOL and ATTR_EMULATE_PREPARES misbehaving)
    session
    • Fixed bug #68331 (Session custom storage callable functions not being called)
    soap
    • Fixed bug #68361 (Segmentation fault on SoapClient::__getTypes).
    zlib
    • Fixed bug #53829 (Compiling PHP with large file support will replace function gzopen by gzopen64)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top