PHP 发布了两个更新版本，分别是 PHP 5.4.36 和 5.6.4 .
其中 5.6.4 改进内容包括：
- Core:
- Fixed bug #68091 (Some Zend headers lack appropriate extern "C" blocks).
- Fixed bug #68104 (Segfault while pre-evaluating a disabled function).
- Fixed bug #68185 ("Inconsistent insteadof definition."- incorrectly triggered).
- Fixed bug #68355 (Inconsistency in example php.ini comments).
- Fixed bug #68370 ("unset($this)" can make the program crash).
- Fixed bug #68422 (Incorrect argument reflection info for array_multisort()).
- Fixed bug #68545 (NULL pointer dereference in unserialize.c).
- Fixed bug #68446 (Array constant not accepted for array parameter default).
- Fixed bug #68594 (Use after free vulnerability in unserialize()).
- Date:
- Fixed day_of_week function as it could sometimes return negative values internally.
- FPM:
- Fixed bug #68381 (fpm_unix_init_main ignores log_level).
- Fixed bug #68420 (listen=9000 listens to ipv6 localhost instead of all addresses).
- Fixed bug #68421 (access.format='%R' doesn't log ipv6 address).
- Fixed bug #68423 (PHP-FPM will no longer load all pools).
- Fixed bug #68428 (listen.allowed_clients is IPv4 only).
- Fixed bug #68452 (php-fpm man page is oudated).
- Fixed request #68458 (Change pm.start_servers default warning to notice).
- Fixed bug #68463 (listen.allowed_clients can silently result in no allowed access).
- Fixed request #68391 (php-fpm conf files loading order).
- Fixed bug #68478 (access.log don't use prefix).
- Mcrypt:
- Fixed possible read after end of buffer and use after free.
- GMP:
- Fixed bug #68419 (build error with gmp 4.1).
- PDO_pgsql:
- Fixed bug #67462 (PDO_PGSQL::beginTransaction() wrongly throws exception when not in transaction) (Matteo)
- Fixed bug #68351 (PDO::PARAM_BOOL and ATTR_EMULATE_PREPARES misbehaving) (Matteo)
- Session:
- Fixed bug #68331 (Session custom storage callable functions not being called) (Yasuo Ohgaki)
- SOAP:
- Fixed bug #68361 (Segmentation fault on SoapClient::__getTypes).
- zlib:
- Fixed bug #53829 (Compiling PHP with large file support will replace function gzopen by gzopen64) (Sascha Kettler, Matteo)
而 PHP 5.4.36 改进内容包括：
Core:
- Upgraded crypt_blowfish to version 1.3.
- Fixed bug #68545 (NULL pointer dereference in unserialize.c).
- Fixed bug #68594 (Use after free vulnerability in unserialize()) (CVE-2014-8142).
| 
