PHP versions 5.4.x earlier than 5.4.18 are affected by the following vulnerabilities : - A heap corruption error exists in numerous functions in the file ‘ext/xml/xml.c’. (CVE-2013-4113 / Bug #65236)
An error exists related to certificate validation, the ‘subjectAltName’ field and certificates containing NULL bytes. This error can allow spoofing attacks. (CVE-2013-4248)