Everything
php
Learn Community Releases The PHP Project
Home » Releases » 5.4 » 5.4.45 »

PHP 5.4.45

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

Source Code

Change Log

  • core

    • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).
      Stas
    • Fixed bug #70219 (Use after free vulnerability in session deserializer).
      taoguangchen at icloud dot com

  • exif

    • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).
      Stas

  • hash

    • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).
      letsgolee at naver dot com

  • pcre

    • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).
      Anatol Belski

  • soap

    • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).
      Stas

  • spl

    • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).
      taoguangchen at icloud dot com
    • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).
      taoguangchen at icloud dot com

  • xslt

    • Fixed bug #69782 (NULL pointer dereference).
      Stas

  • zip

    • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).
      neal at fb dot com

PHP 5.4


  Represents a security release