PHP Release 5.4.5


    PHP 5.4.5 Release Announcement

    The PHP development team would like to announce the immediate availability of PHP 5.4.5. Over 30 bugs were fixed, including a security related overflow issue in the stream implementation. All users of PHP are encouraged to upgrade to this release.

    For source downloads of PHP 5.4.5 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    Change Logs
    core
    • Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt).
    • Fixed bug #62432 (ReflectionMethod random corrupt memory on high concurrent).
    • Fixed bug #62373 (serialize() generates wrong reference to the object).
    • Fixed bug #62357 (compile failure: (S) Arguments missing for built-in function __memcmp).
    • Fixed bug #61998 (Using traits with method aliases appears to result in crash during execution).
    • Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that includes a semi-colon).
    • Fixed potential overflow in _php_stream_scandir (CVE-2012-2688).
    exif
    • Fixed information leak in ext exif
    fpm
    • Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
    • Fixed bug #62160 (Add process.priority to set nice(2) priorities).
    • Fixed bug #62153 (when using unix sockets, multiples FPM instances
    • Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
    • Fixed bug #61839 (Unable to cross-compile PHP with --enable-fpm).
    • Fixed bug #61835 (php-fpm is not allowed to run as root).
    • Fixed bug #61295 (php-fpm should not fail with commented 'user'
    • Fixed bug #61218 (FPM drops connection while receiving some binary values in FastCGI requests).
    • Fixed bug #61045 (fpm don't send error log to fastcgi clients). for non-root start).
    • Fixed bug #61026 (FPM pools can listen on the same address). can be launched without errors).
    iconv
    • Fix bug #55042 (Erealloc in iconv.c unsafe).
    intl
    • Fixed bug #62083 (grapheme_extract() memory leaks).
    • ResourceBundle constructor now accepts NULL for the first two arguments.
    • Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called twice).
    • Fixed bug #62070 (Collator::getSortKey() returns garbage).
    • Fixed bug #62017 (datefmt_create with incorrectly encoded timezone leaks pattern).
    • Fixed bug #60785 (memory leak in IntlDateFormatter constructor).
    json
    • Fixed bug #61359 (json_encode() calls too many reallocs).
    libxml
    • Fixed bug #62266 (Custom extension segfaults during xmlParseFile with FPM SAPI).
    phar
    • Fixed bug #62227 (Invalid phar stream path causes crash).
    readline
    • Fixed bug #62186 (readline fails to compile - void function should not return a value).
    reflection
    • Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfault).
    • Fixed bug #62202 (ReflectionParameter::getDefaultValue() memory leaks with constant).
    sockets
    • Fixed bug #62025 (__ss_family was changed on AIX 5.3).
    spl
    • Fixed bug #62433 (Inconsistent behavior of RecursiveDirectoryIterator to dot files).
    • Fixed bug #62262 (RecursiveArrayIterator does not implement Countable).
    xml writer
    • Fixed bug #62064 (memory leak in the XML Writer module).
    zip
    • Upgraded libzip to 0.10.1
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top