PHP Release 5.4.20


    PHP 5.4.20 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.4.20. About 30 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.4.20 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    Change Logs
    core
    • Fixed bug #60598 (cli/apache sapi segfault on objects manipulation).
    • Fixed bug #65579 (Using traits with get_class_methods causes segfault).
    • Fixed bug #65490 (Duplicate calls to get lineno & filename for DTRACE_FUNCTION_*).
    • Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding spaces).
    • Fixed bug #65481 (shutdown segfault due to serialize)
    • Fixed bug #65470 (Segmentation fault in zend_error() with --enable-dtrace).
    • Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails).
    • Fixed bug #65304 (Use of max int in array_sum).
    • Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case).
    • Fixed bug #65225 (PHP_BINARY incorrectly set).
    • Improved fix for bug #63186 (compile failure on netbsd).
    • Fixed bug #62692 (PHP fails to build with DTrace).
    • Fixed bug #61759 (class_alias() should accept classes with leading backslashes).
    • Fixed bug #61345 (CGI mode - make install don't work).
    • Cherry-picked some DTrace build commits from PHP 5.5 branch
    • Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d)
    curl
    • Fixed bug #65458 (curl memory leak).
    datetime
    • Fixed bug #65554 (createFromFormat broken when weekday name is followed by some delimiters). .
    • Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught by AddressSanitizer). .
    openssl
    • Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in some cases).
    session
    • Fixed bug #62129 (rfc1867 crashes php even though turned off).
    • Fixed bug #50308 (session id not appended properly for empty anchor tags).
    • Fixed possible buffer overflow under Windows. Note: Not a security fix.
    • Changed session.auto_start to PHP_INI_PERDIR.
    soap
    • Fixed bug #65018 (SoapHeader problems with SoapServer).
    spl
    • Fixed bug #65328 (Segfault when getting SplStack object Value).
    pdo
    • Fixed bug #64953 (Postgres prepared statement positional parameter casting).
    phar
    • Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents).
    pgsql
    • Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).
    • Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()).
    zlib
    • Fixed bug #65391 (Unable to send vary header user-agent when ob_start('ob_gzhandler') is called)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top