Home » Releases » 5.4 » 5.4.45 »

PHP 5.4.38

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.4 is 5.4.45.

Source Code

Change Log

  • core

    • Removed support for multi-line headers, as the are deprecated by RFC 7230.
      Stas
    • Added NULL byte protection to exec, system and passthru.
      Yasuo
    • Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow).
      Stas
    • Fixed bug #67827 (broken detection of system crypt sha256/sha512 support).
      ncopa at alpinelinux dot org
    • Fixed bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone). (CVE-2015-0273)
      Stas
  • enchant

    • Fixed bug #68552 (heap buffer overflow in enchant_broker_request_dict()).
      Antony
  • soap

    • Fixed bug #67427 (SoapServer cannot handle large messages) (brandt at docoloc dot de)

PHP 5.4


  Represents a security release