PHP Release 5.4.27


    PHP 5.4.27 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.4.27. 6 bugs were fixed in this release, including CVE-2013-7345. All PHP 5.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.4.27 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.4.27 (tar.bz2)
    SHA256: 09dcc44cded735e1cf1b1b9f2749d1a0fd90e03378b6a70364a662f4740e61e2
    PHP 5.4.27 (tar.gz)
    SHA256: a70dc68eeed902f8378fded473d53e4e37be645b941554dcf4237559cbda2bb3
    Change Logs
    core
    • Fixed bug #60602 (proc_open() changes environment array)
    fileinfo
    • Fixed bug #66946 (fileinfo: extensive backtracking in awk rule regular expression). (CVE-2013-7345)
    fpm
    • Added clear_env configuration directive to disable clearenv() call.
    • GMP
    • Fixed bug #66872 (invalid argument crashes gmp_testbit)
    mail
    • Fixed bug #66535 (Don't add newline after X-PHP-Originating-Script)
    mysqli
    • Fixed bug #66762 (Segfault in mysqli_stmt::bind_result() when link closed)
    openssl
    • Fixed bug #66833 (Default disgest algo is still MD5, switch to SHA1).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top