19 Feb 2015 PHP 5.4.38

- Core:
 . Removed support for multi-line headers, as the are deprecated by RFC 7230.
    (Stas)
 . Added NULL byte protection to exec, system and passthru. (Yasuo)
 . Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname
   buffer overflow). (Stas)
 . Fixed bug #67827 (broken detection of system crypt sha256/sha512 support).
   (ncopa at alpinelinux dot org)  
 . Fixed bug #68942 (Use after free vulnerability in unserialize() with
   DateTimeZone). (Stas)
  
- Enchant: 
 . Fixed bug #6855 (heap buffer overflow in enchant_broker_request_dict()).
   (Antony)

- SOAP:
 . Fixed bug #67427 (SoapServer cannot handle large messages)
   (brandt at docoloc dot de)