PHP Release 5.3.14


    PHP 5.3.14 Release Announcement

    The PHP development team would like to announce the immediate availability of PHP 5.3.14. This release fixes two security related issues. All users of PHP 5.3 are encouraged to upgrade to this release.

    PHP 5.3.14 fixes an security issue in the implementation of crypt() and a heap overflow in the Phar extension. Over 30 bugs were fixed

    Please note that php://fd is now only available if the CLI SAPI is used

    For source downloads of PHP 5.3.14 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    Change Logs
    cli sapi
    • Fixed bug #61546 (functions related to current script failed when chdir() in cli sapi).
    curl
    • Fixed bug #61948 (CURLOPT_COOKIEFILE '' raises open_basedir restriction).
    com
    • Fixed bug #62146 com_dotnet cannot be built shared.
    core
    • Fixed CVE-2012-2143.
    • Fixed missing bound check in iptcparse().
    • Fixed bug #62373 (serialize() generates wrong reference to the object).
    • Fixed bug #62005 (unexpected behavior when incrementally assigning to a member of a null object).
    • Fixed bug #61991 (long overflow in realpath_cache_get()).
    • Fixed bug #61764 ('I' unpacks n as signed if n > 2^31-1 on LP64).
    • Fixed bug #61730 (Segfault from array_walk modifying an array passed by reference).
    • Fixed bug #61713 (Logic error in charset detection for htmlentities).
    • Fixed bug #54197 ([PATH=] sections incompatibility with user_ini.filename set to null).
    • Changed php://fd to be available only for CLI.
    fileinfo
    • Fixed bug #61812 (Uninitialised value used in libmagic).
    iconv extension
    • Fixed a bug that iconv extension fails to link to the correct library when another extension makes use of a library that links to the iconv library. See https://bugs.gentoo.org/show_bug.cgi?id=364139 for detail.
    intl
    • Fixed bug #62082 (Memory corruption in internal function get_icu_disp_value_src_php()).
    • JSON
    • Fixed bug #61537 (json_encode() incorrectly truncates/discards information).
    pdo
    • Fixed bug #61755 (A parsing bug in the prepared statements can lead to access violations).
    phar
    • Fix bug #61065 (Secunia SA44335).
    streams
    • Fixed bug #61961 (file_get_contents leaks when access empty file with maxlen set).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top