PHP Release 5.6.9


    PHP 5.6.9 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.6.9. Several bugs have been fixed. All PHP 5.6 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.6.9 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.6.9 (tar.bz2)
    SHA256: 19d3b87b7b8bba3be24cf6d757d16b723a98881c3af8d15469fd25501e9abcb9
    PHP 5.6.9 (tar.gz)
    SHA256: 49527ba66357fe65bcd463dfb8dcff1b8879419f88b3c334f50696a2aceacb87
    PHP 5.6.9 (tar.xz)
    SHA256: 1fac497b596f5e4e87d87a7ca90f8725e39a8ca3f9d7adb500fa83c4bb70a73f
    Change Logs
    core
    • Fixed bug #69467 (Wrong checked for the interface by using Trait).
    • Fixed bug #69420 (Invalid read in zend_std_get_method).
    • Fixed bug #60022 ("use statement [...] has no effect" depends on leading backslash).
    • Fixed bug #67314 (Segmentation fault in gc_remove_zval_from_buffer).
    • Fixed bug #68652 (segmentation fault in destructor).
    • Fixed bug #69419 (Returning compatible sub generator produces a warning).
    • Fixed bug #69472 (php_sys_readlink ignores misc errors from GetFinalPathNameByHandleA).
    • Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability). (CVE-2015-4024)
    • Fixed bug #69403 (str_repeat() sign mismatch based memory corruption).
    • Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)
    • Fixed bug #69522 (heap buffer overflow in unpack()).
    ftp
    • Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4022)
    odbc
    • Fixed bug #69354 (Incorrect use of SQLColAttributes with ODBC 3.0).
    • Fixed bug #69474 (ODBC: Query with same field name from two tables returns incorrect result).
    • Fixed bug #69381 (out of memory with sage odbc driver).
    openssl
    • Fixed bug #69402 (Reading empty SSL stream hangs until timeout).
    pcntl
    • Fixed bug #68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)
    phar
    • Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename starts with null). (CVE-2015-4021)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top