PHP 5.4 is no longer officially supported by the PHP project.
Official support refers to that provided direct by the PHP Project.
If you install PHP via third-party packages, support timelines may be different.
Please read the Release Support Policy for more information.
The latest release of PHP 5.4 is
5.4.45.
Source Code
Change Log
-
core
-
Fixed bug
#69364 (PHP Multipart/form-data remote dos Vulnerability). (CVE-2015-4024)
-
Fixed bug
#69403 (str_repeat() sign mismatch based memory corruption).
-
Fixed bug
#69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)
-
Fixed bug
#69522 (heap buffer overflow in unpack()).
-
ftp
-
Fixed bug
#69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4022)
-
pcntl
-
Fixed bug
#68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)
-
pcre
-
phar
-
Fixed bug
#69453 (Memory Corruption in phar_parse_tarfile when entry filename starts with null). (CVE-2015-4021)