PHP Release 5.3.28


    PHP 5.3.28 Release Announcement

    The PHP development team announces the immediate availability of PHP 5.3.28. This release fixes two security issues in OpenSSL module in PHP 5.3 - CVE-2013-4073 and CVE-2013-6420. All PHP 5.3 users are encouraged to upgrade to PHP 5.3.28 or latest versions of PHP 5.4 or PHP 5.5.

    For source downloads of PHP 5.3.28 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 5.3.28 (tar.bz2)
    SHA256: 0cac960c651c4fbb3d21cf2f2b279a06e21948fb35a0d1439b97296cac1d8513
    PHP 5.3.28 (tar.gz)
    SHA256: ace8fde82a4275d6dcec4e15feb047416e1813fea46e159dfd113298371396d0
    Change Logs
    openssl
    • Fixed handling null bytes in subjectAltName (CVE-2013-4073).
    • Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420). .
    fpm
    • Fixed bug #67060 (sapi/fpm: possible privilege escalation due to insecure default configuration) (CVE-2014-0185).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top