Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.4 » 5.4.45 »

PHP 5.4.37

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.4 is 5.4.45.

Source Code

Change Log

  • core

    • Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()). (CVE-2015-0231)
      Stefan Esser

  • cgi

    • Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
      Stas

  • exif

    • Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232)
      Stas

  • fileinfo

    • Removed readelf.c and related code from libmagic sources (Remi, Anatol)
    • Fixed bug #68735 (fileinfo out-of-bounds memory access).
      Anatol

  • openssl

    • Fixed bug #55618 (use case-insensitive cert name matching).
      Daniel Lowrey

PHP 5.4


  Represents a security release