The PHP development team announces the immediate availability of PHP 5.4.4 and PHP 5.3.14. The releases fix multiple security issues: A weakness in the DES implementation of crypt and a heap overflow issue in the phar extension. PHP 5.4.4 and PHP 5.3.14 fix over 30 bugs. Please note that the use of php://fd streams is now restricted to the CLI SAPI. For a full list of changes in PHP 5.3.14 and PHP 5.4.4, see the ChangeLogs on http://www.php.net/ChangeLog-5.php For source downloads please visit our downloads page http://www.php.net/downloads.php Windows binaries can be found on the Windows downloads page http://windows.php.net/download/ All users are strongly encouraged to upgrade to PHP 5.3.14 or PHP 5.4.4. David Soria Parra, Stas Malyshev and Johannes Schlüter PHP Release Masters -- PHP Announcements Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php