PHP PHP 5.4.34 Released

eva2000 · Oct 17, 2014

Stas Malyshev

Continue reading...

eva2000 · Oct 17, 2014

The PHP development team announces the immediate availability of PHP
5.4.34.
6 security-related bugs were fixed in this release, including fixes for
CVE-2014-3668,
CVE-2014-3669 and CVE-2014-3670.
Also, a fix for OpenSSL which produced regressions was reverted.

All PHP 5.4 users are encouraged to upgrade to this version.

For source downloads of PHP 5.4.34 please visit our
downloads page: PHP: Downloads

Windows binaries can be found on PHP For Windows: Binaries and sources Releases

The list of changes is recorded in the ChangeLog:
PHP: PHP 5 ChangeLog

Stanislav Malyshev
PHP 5.4 RM
Click to expand...

16-Oct-2014

Fileinfo:

Fixed bug #66242 (libmagic: don't assume char is signed).

Core:

Fixed bug #67985 (Incorrect last used array index copied to new array after unset).

Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)

cURL:

Fixed bug #68089 (NULL byte injection - cURL lib).

EXIF:

Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)

OpenSSL:

Reverted fixes for bug #41631, due to regressions.

XMLRPC:

Fixed bug #68027 (Global buffer overflow in mkgmtime() function). (CVE-2014-3668)

Click to expand...

Log in / Register

Forums

Join the community today

PHP PHP 5.4.34 Released

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

PHP PHP 5.4.34 Released

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.