Hi Stas, On Fri, Apr 17, 2015 at 6:11 AM, Stanislav Malyshev <smalyshev@xxxxxxxxx> wrote: > The PHP development team announces the immediate availability of PHP > 5.4.40. 14 security-related bugs were fixed in this release, including > CVE-2014-9709, CVE-2015-2301, CVE-2015-2783, CVE-2015-1352. > > All PHP 5.4 users are encouraged to upgrade to this version. > > For source downloads of PHP 5.4.40 please visit our downloads page: > http://www.php.net/downloads.php > > Windows binaries can be found on http://windows.php.net/download/. > > The list of changes is recorded in the ChangeLog: > http://www.php.net/ChangeLog-5.php#5.4.40 > https://bugs.php.net/bug.php?id=69353 There is similar bug. I guess there wasn't enough time for this. https://bugs.php.net/bug.php?id=69418 I made this bug a security bug. Regards, -- Yasuo Ohgaki yohgaki@xxxxxxxxxx