PHP 5.4.2 is now available for download.
Fixed PHP-CGI query string parameter vulnerability.(unnoticed for at least 8 years).If you are using Apache mod_cgi to run PHP you may be vulnerable. To see if you are, just add ?-s to the end of any of your URLs. If you see your source code, you are vulnerable. If your site renders normally, you are not.
Download PHP 5.4.2
PHP 5.4.15 released
PHP 5.4.15 is now available for download.What’s new in this release. Fixes: debug_backtrace in set_error_handler corrupts zend heap: segfault. dns_get_record result with string of length -1. follow_location parameter of context is ignored for most response codes. fd leak on Solaris. fd leak on Solaris. Upgraded libmagic to 5.14. Windows x64 version of stream_socket_pair() and improved [...]
PHP 5.4.12 released
PHP 5.4.12 is now available for download.Whats new in this release? Fixes: Wrong TSRM usage in zend_register_class alias. get_html_translation_table( output incomplete with HTML_ENTITIES and ISO-8859-1. isset( inconsistently produces a fatal error on protected property. Bad warning text from strpos on empty needle. Use after scope error in zend_compile. Poor efficiency of strtr using array with [...]
PHP 5.4.11 released
PHP 5.4.11 is now available for download.What’s new in this release? Fixes: Sigsegv when Exception::$trace is changed by user Errors in eval’ed code produce status code 500 getenv produces memory leak with CGI SAPI. FILTER_VALIDATE_INT does not accept +0 and -0 json_decode does not properly decode with options parameter Update list of common mime types. [...]
PHP 5.4.10 released
PHP 5.4.10 is now available for download.What’s new in this release? Fixes: Segfault in gc_collect_cycles parse_ini_file() with INI_SCANNER_RAW removes quotes from value wrong called method as callback with inheritance config.guess file does not have AIX 7 defined, shared objects are not created Crasher in tt-rss backend.php ob_start callback gets passed empty string Poor date() performance [...]
