Everything

php

PHP 5.4.44

PHP 5.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.4 is 5.4.45.

Source Code

PHP 5.4.44 (tar.bz2)
- sha256: 8dd59e5ce9248cf36ac3de5412a518b8b24c01ace6c46ce3d12e4ce981a3856d
PHP 5.4.44 (tar.gz)
- sha256: 1799998e48da3d8f34722840628e18789e26ea21741d4e498ade6749b3266602

core
- Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls).
  
  Stas
- Fixed bug #69892 (Different arrays compare indentical due to integer key truncation).
  
  Nikita
- Fixed bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref).
  
  Stas
openssl
- Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically secure).
  
  Stas
phar
- Improved fix for bug #69441.
  
  Anatol Belski
- Fixed bug #70019 (Files extracted from archive may be placed outside of destination directory).
  
  Anatol Belski
soap
- Fixed bug #70081 (SoapClient info leak / null pointer dereference via multiple type confusions).
  
  Stas
spl
- Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject items).
  
  sean.heelan
- Fixed bug #70166 (Use After Free Vulnerability in unserialize() with SPLArrayObject).
  
  taoguangchen at icloud dot com
- Fixed bug #70168 (Use After Free Vulnerability in unserialize() with SplObjectStorage).
  
  taoguangchen at icloud dot com
- Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList).
  
  taoguangchen at icloud dot com

Represents a security release