PHP 5.6.4 is now released. The new version is already available in custombuild. Here is a quote from php.net:
Here is changelog: http://php.net/ChangeLog-5.php#5.6.4
The PHP development team announces the immediate availability of PHP 5.6.4. This release fixes several bugs and one CVE related to unserialization. All PHP 5.6 users are encouraged to upgrade to this version.
Here is changelog: http://php.net/ChangeLog-5.php#5.6.4