Home » Releases » 5.4 » 5.4.45 »

PHP 5.4.41

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.4 is 5.4.45.

Source Code

Change Log

  • core

    • Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability). (CVE-2015-4024)
      Stas
    • Fixed bug #69403 (str_repeat() sign mismatch based memory corruption).
      Stas
    • Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)
      Stas
    • Fixed bug #69522 (heap buffer overflow in unpack()).
      Stas
  • ftp

    • Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4022)
      Stas
  • pcntl

    • Fixed bug #68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)
      Stas
  • pcre

    • Upgraded pcrelib to 8.37.
      CVE-2015-2325
      CVE-2015-2326
  • phar

    • Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename starts with null). (CVE-2015-4021)
      Stas

PHP 5.4


  Represents a security release