Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.4 » 5.4.45 »

PHP 5.4.18

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.4 is 5.4.45.

Source Code

Change Log

  • core

    • Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey avp200681 gmail com).
    • Fixed bug #65254 (Exception not catchable when exception thrown in autoload with a namespace).
      Laruence
    • Fixed bug #65108 (is_callable() triggers Fatal Error).
      David Soria Parra
      Laruence
    • Fixed bug #65088 (Generated configure script is malformed on OpenBSD).
      Adam
    • Fixed bug #62964 (Possible XSS on "Registered stream filters" info).
      david at nnucomputerwhiz dot com
    • Fixed bug #62672 (Error on serialize of ArrayObject).
      Lior Kaplan
    • Fixed bug #62475 (variant_* functions causes crash when null given as an argument).
      Felipe
    • Fixed bug #60732 (php_error_docref links to invalid pages).
      Jakub Vrana
    • Fixed bug #65226 (chroot() does not get enabled).
      Anatol

  • cgi

    • Fixed Bug #65143 (Missing php-cgi man page).
      Remi

  • cli server

    • Fixed bug #65066 (Cli server not responsive when responding with 422 http status code).
      Adam

  • curl

    • Fixed bug #62665 (curl.cainfo doesn't appear in php.ini).
      Lior Kaplan

  • fpm

    • Fixed bug #63983 (enabling FPM borks compile on FreeBSD).
      chibisuke at web dot de
      Felipe

  • ftp

    • Fixed bug #65228 (FTPs memory leak with SSL).
      marco dot beierer at mbsecurity dot ch

  • gmp

    • Fixed bug #65227 (Memory leak in gmp_cmp second parameter).
      Felipe

  • imap

    • Fixed bug #64467 (Segmentation fault after imap_reopen failure).
      askalski at gmail dot com

  • intl

    • Fixed bug #62759 (Buggy grapheme_substr() on edge case).
      Stas
    • Fixed bug #61860 (Offsets may be wrong for grapheme_stri* functions).
      Stas

  • mysqlnd

    • Fixed segfault in mysqlnd when doing long prepare.
      Andrey

  • odbc

    • Fixed bug #61387 (NULL valued anonymous column causes segfault in odbc_fetch_array).
      Brandon Kirsch

  • openssl

    • Fixed handling null bytes in subjectAltName (CVE-2013-4248).
      Christian Heimes

  • pdo

    • Allowed PDO_OCI to compile with Oracle Database 12c client libraries.
      Chris Jones

  • pdo_dblib

    • Fixed bug #65219 (PDO/dblib not working anymore ("use dbName" not sent)).
      Stanley Sufficool

  • pdo_pgsql

    • Fixed meta data retrieve when OID is larger than 2^31.
      Yasuo

  • phar

    • Fixed Bug #65142 (Missing phar man page).
      Remi

  • session

    • Fixed bug #62535 ($_SESSION[$key]["cancel_upload"] doesn't work as documented).
      Arpad
    • Fixed bug #35703 (when session_name("123") consist only digits, should warning).
      Yasuo
    • Fixed bug #49175 (mod_files.sh does not support hash bits). Patch by oorza2k5 at gmail dot com (Yasuo)

  • sockets

    • Implemented FR #63472 (Setting SO_BINDTODEVICE with socket_set_option).
      Damjan Cvetko

  • spl

    • Fixed bug #65136 (RecursiveDirectoryIterator segfault).
      Laruence
    • Fixed bug #61828 (Memleak when calling Directory(Recursive)Iterator /Spl(Temp)FileObject ctor twice).
      Laruence
    • Fixed bug #60560 (SplFixedArray un-/serialize, getSize(), count() return 0, keys are strings).
      Adam

  • xml

    • Fixed bug #65236 (heap corruption in xml parser, CVE-2013-4113).
      Rob

PHP 5.4


  Represents a security release