: Fixed multiple heap-based buffer overflows in the mbstring extension ( CVE-2019-9023 ) and an integer underflow in the gd graphics library ( CVE-2016-10166 ).
Staying on PHP 5.6.40 is widely considered a major security risk today. Security experts at Influential Software and TuxCare emphasize that:
return true;