Home » Releases » 5.4 » 5.4.45 »

PHP 5.4.42

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.4 is 5.4.45.

Source Code

Change Log

  • core

    • Imroved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4643)
      Max Spelsberg
    • Fixed bug #69646 (OS command injection vulnerability in escapeshellarg). (CVE-2015-4642)
      Anatol Belski
    • Fixed bug #69719 (Incorrect handling of paths with NULs).
      Stas
  • litespeed sapi

    • Fixed bug #68812 (Unchecked return value).
      George Wang
  • mail

    • Fixed bug #68776 (mail() does not have mail header injection prevention for additional headers).
      Yasuo
  • postgres

    • Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644)
      Remi
  • sqlite3

    • Upgrade bundled sqlite to 3.8.10.2.
      CVE-2015-3414
      CVE-2015-3415
      CVE-2015-3416) (Kaplan

PHP 5.4


  Represents a security release