PHP Release 5.4.34


    PHP 5.4.34 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.4.34. 6 security-related bugs were fixed in this release, including fixes for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670. Also, a fix for OpenSSL which produced regressions was reverted. All PHP 5.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 5.4.34 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.4.34 (tar.bz2)
    SHA256: 57d4ea10f0c18b096a7c8fd0a98dcbe40c8f4dc94453fd3ca0a10e35fb2f8234
    PHP 5.4.34 (tar.gz)
    SHA256: c8d909062ad7616cedb54dc03d85b40d40f6d4adce986ec8cabd9b8b94872096
    Change Logs
    fileinfo
    • Fixed bug #66242 (libmagic: don't assume char is signed).
    core
    • Fixed bug #67985 (Incorrect last used array index copied to new array after unset).
    • Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)
    curl
    • Fixed bug #68089 (NULL byte injection - cURL lib).
    exif
    • Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
    openssl
    • Reverted fixes for bug #41631, due to regressions.
    xmlrpc
    • Fixed bug #68027 (Global buffer overflow in mkgmtime() function). (CVE-2014-3668)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top