PHP Release 5.4.13


    PHP 5.4.13 Release Announcement

    The PHP development team would like to announce the immediate availability of PHP 5.4.13. About 15 bugs were fixed, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to this release.

    For source downloads of PHP 5.4.13 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    Change Logs
    core
    • Fixed bug #64354 (Unserialize array of objects whose class can't be autoloaded fail).
    • Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
    • Fixed bug #64197 (_Offsetof() macro used but not defined on ARM/Clang).
    • Implemented FR #64175 (Added HTTP codes as of RFC 6585).
    • Fixed bug #64142 (dval to lval different behavior on ppc64).
    • Fixed bug #64070 (Inheritance with Traits failed with error).
    cli server
    • Fixed bug #64128 (buit-in web server is broken on ppc64).
    mbstring
    • mb_split() can now handle empty matches like preg_split() does.
    • mysqlnd
    • Fixed bug #63530 (mysqlnd_stmt::bind_one_parameter crashes, uses wrong alloc for stmt->param_bind).
    openssl
    • New SSL stream context option to prevent CRIME attack vector.
    • Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
    pdo_mysql
    • Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
    phar
    • Fixed timestamp update on Phar contents modification.
    • SOAP
    • Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
    • Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
    spl
    • Fixed bug #64264 (SPLFixedArray toArray problem).
    • Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
    • Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
    • Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
    snmp
    • Fixed bug #64124 (IPv6 malformed).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top