Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.4 » 5.4.45 »

PHP 5.4.32

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.4 is 5.4.45.

Source Code

Change Log

  • com

    • Fixed missing type checks in com_event_sink.
      Yussuf Khalil
      Stas
    • Fixed bug #41577 (DOTNET is successful once per server run).
      Aidas Kasparas

  • fileinfo

    • Fixed bug #67705 (extensive backtracking in rule regular expression). (CVE-2014-3538)
      Remi
    • Fixed bug #67716 (Segfault in cdf.c). (CVE-2014-3587)
      Remi

  • gd

    • Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference).
      CVE-2014-2497). (Remi
    • Fixed bug #67730 (Null byte injection possible with imagexxx functions). (CVE-2014-5120)
      Ryan Mauger

  • litespeed

    • Updated LiteSpeed SAPI code from V5.5 to V6.6 (George Wang)

  • network

    • Fixed bug #67717 (segfault in dns_get_record). (CVE-2014-3597)
      Remi

  • milter

    • Fixed bug #67715 (php-milter does not build and crashes randomly).
      Mike

  • openssl

    • Fixed missing type checks in OpenSSL options (Yussuf Khalil, Stas).

  • readline

    • Fixed bug #55496 (Interactive mode doesn't force a newline before the prompt).
      Bob
      Johannes
    • Fixed bug #67496 (Save command history when exiting interactive shell with control-c).
      Dmitry Saprykin
      Johannes

  • sessions

    • Fixed missing type checks in php_session_create_id. (Yussuf Khalil, Stas).

  • spl

    • Fixed bug #67539 (ArrayIterator use-after-free due to object change during sorting). (CVE-2014-4698)
      research at insighti dot org
      Laruence
    • Fixed bug #67538 (SPL Iterators use-after-free). (CVE-2014-4670)
      Laruence

  • core

    • Fixed bug #67693 (incorrect push to the empty array) (Tjerk)

  • odbc

    • Fixed bug #60616 (odbc_fetch_into returns junk data at end of multi-byte char fields).
      Keyur

  • mysqli

    • Fixed bug #67839 (mysqli does not handle 4-byte floats correctly).
      Keyur

PHP 5.4


  Represents a security release