PHP Release 5.4.26


    PHP 5.4.26 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.4.26. 5 bugs were fixed in this release, including CVE-2014-1943. All PHP 5.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.4.26 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.4.26 (tar.bz2)
    SHA256: 5053649317b9331df40bd836c976a32b31dbc5c5d68997d3ae01cb90db22d240
    PHP 5.4.26 (tar.gz)
    SHA256: ec3f902b5e8cbdd660e01e784b537f1210a12182d9bbd62164776075bc097eca
    Change Logs
    json
    • Fixed bug #65753 (JsonSerializeable couldn't implement on module extension)
    fileinfo
    • Fixed bug #66731 (file: infinite recursion). (CVE-2014-1943)
    • Fixed bug #66820 (out-of-bounds memory access in fileinfo).
    ldap
    • Implemented ldap_modify_batch (https://wiki.php.net/rfc/ldap_modify_batch).
    openssl
    • Fixed bug #66501 (Add EC key support to php_openssl_is_private_key).
    pgsql
    • Added warning for dangerous client encoding and remove possible injections for pg_insert()/pg_update()/pg_delete()/pg_select().
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top