PHP 5.4 is no longer officially supported by the PHP project.
Official support refers to that provided direct by the PHP Project.
If you install PHP via third-party packages, support timelines may be different.
Please read the Release Support Policy for more information.
The latest release of PHP 5.4 is
5.4.45.
Source Code
Change Log
-
core
-
Fixed bug
#68976 (Use After Free Vulnerability in unserialize()) (CVE-2015-2787).
-
Fixed bug
#69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options).
-
Fixed bug
#69207 (move_uploaded_file allows nulls in path). (CVE-2015-2348)
-
ereg
-
Fixed bug
#69248 (heap overflow vulnerability in regcomp.c) (CVE-2015-2305).
-
soap
-
Fixed bug
#69085 (SoapClient's __call() type confusion through unserialize()).
CVE-2015-4147
CVE-2015-4148) (Dmitry
-
zip
-
Fixed bug
#69253 (ZIP Integer Overflow leads to writing past heap boundary) (CVE-2015-2331).