PHP Release 5.4.16


PHP 5.4.16 Release Announcement

The PHP development team announces the immediate availability of PHP 5.4.16. About 15 bugs were fixed, including CVE 2013-2110. All users of PHP are encouraged to upgrade to this release.

For source downloads of PHP 5.4.16 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
Change Logs
core
  • Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode, CVE 2013-2110).
  • Fixed bug #64853 (Use of no longer available ini directives causes crash on TS build).
  • Fixed bug #64729 (compilation failure on x32).
  • Fixed bug #64720 (SegFault on zend_deactivate).
  • Fixed bug #64660 (Segfault on memory exhaustion within function definition).
calendar
  • Fixed bug #64895 (Integer overflow in SndToJewish).
fileinfo
  • Fixed bug #64830 (mimetype detection segfaults on mp3 file).
fpm
  • Ignore QUERY_STRING when sent in SCRIPT_FILENAME.
  • Fixed some possible memory or resource leaks and possible null dereference detected by code coverity scan.
  • Log a warning when a syscall fails.
  • Add --with-fpm-systemd option to report health to systemd, and systemd_interval option to configure this. The service can now use Type=notify in the systemd unit file.
  • MySQLi
  • Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB pointer has closed).
  • Phar
  • Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or with non std tmp dir).
snmp
  • Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
  • Fixed bug #64159 (Truncated snmpget).
streams
  • Fixed bug #64770 (stream_select() fails with pipes returned by proc_open() on Windows x64).
zend engine
  • Fixed bug #64821 (Custom Exceptions crash when internal properties overridden).
To Top