Everything

php

Home » Releases » 5.3 » 5.3.29 »

PHP 5.3.4

PHP 5.3 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 5.3 is 5.3.29.

Source Code

PHP 5.3.4 (tar.bz2)
- md5: 2c069d8f690933e3bf6a8741ed818150
PHP 5.3.4 (tar.gz)
- md5: b69b36132899c5ca3bf155efa0218676

Change Log

misc
- Upgraded bundled Sqlite3 to version 3.7.3.
  
  Ilia
- Upgraded bundled PCRE to version 8.10.
  
  Ilia
security enhancements
- Fixed crash in zip extract method (possible CWE-170).
  
  Maksymilian Arciemowicz
  
  Pierre
- Paths with NULL in them (foo\0bar.txt) are now considered as invalid.
  
  Rasmus
- Fixed a possible double free in imap extension (Identified by Mateusz Kocielski).
  
  CVE-2010-4150). (Ilia
- Fixed NULL pointer dereference in ZipArchive::getArchiveComment.
  
  CVE-2010-3709). (Maksymilian Arciemowicz
- Fixed possible flaw in open_basedir (CVE-2010-3436).
  
  Pierre
- Fixed MOPS-2010-24, fix string validation.
  
  CVE-2010-2950). (Pierre
- Fixed symbolic resolution support when the target is a DFS share.
  
  Pierre
- Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).
  
  Adam
general improvements
- Added stat support for zip stream.
  
  Pierre
- Added follow_location (enabled by default) option for the http stream support.
  
  Pierre
- Improved support for is_link and related functions on Windows.
  
  Pierre
- Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
  
  Gustavo
implemented feature requests
- Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
  
  Kalle
- Implemented FR #52173, added functions pcntl_get_last_error() and pcntl_strerror().
  
  nick dot telford at gmail dot com
  
  Arnaud
- Implemented symbolic links support for open_basedir checks.
  
  Pierre
- Implemented FR #51804, SplFileInfo::getLinkTarget on Windows.
  
  Pierre
- Implemented FR #50692, not uploaded files don't count towards max_file_uploads limit. As a side improvement, temporary files are not opened for empty uploads and, in debug mode, 0-length uploads.
  
  Gustavo
improved mysqlnd
- Added new character sets to mysqlnd, which are available in MySQL 5.5 (Andrey)
improved php-fpm sapi
- Added '-p/--prefix' to php-fpm to use a custom prefix and run multiple instances.
  
  fat
- Added custom process title for FPM.
  
  fat
- Added '-t/--test' to php-fpm to check and validate FPM conf file.
  
  fat
- Added statistics about listening socket queue length for FPM.
  
  andrei dot nigmatulin at gmail dot com
  
  fat
core
- Fixed extract() to do not overwrite $GLOBALS and $this when using EXTR_OVERWRITE.
  
  jorto at redhat dot com
- Fixed bug in the Windows implementation of dns_get_record, where the two last parameters wouldn't be filled unless the type were DNS_ANY (Gustavo).
- Changed the $context parameter on copy() to actually have an effect.
  
  Kalle
- Fixed htmlentities/htmlspecialchars accepting certain ill-formed UTF-8 sequences.
  
  Gustavo
- Fixed bug #53409 (sleep() returns NULL on Windows).
  
  Pierre
- Fixed bug #53319 (strip_tags() may strip '<br />' incorrectly).
  
  Felipe
- Fixed bug #53304 (quot_print_decode does not handle lower-case hex digits).
  
  Ilia
  
  daniel dot mueller at inexio dot net
- Fixed bug #53248 (rawurlencode RFC 3986 EBCDIC support misses tilde char).
  
  Justin Martin
- Fixed bug #53226 (file_exists fails on big filenames).
  
  Adam
- Fixed bug #53198 (changing INI setting "from" with ini_set did not have any effect).
  
  Gustavo
- Fixed bug #53180 (post_max_size=0 not disabling the limit when the content type is application/x-www-form-urlencoded or is not registered with PHP).
  
  gm at tlink dot de
  
  Gustavo
- Fixed bug #53141 (autoload misbehaves if called from closing session).
  
  ladislav at marek dot su
- Fixed bug #53021 (In html_entity_decode, failure to convert numeric entities with ENT_NOQUOTES and ISO-8859-1). Fixed and extended the fix of ENT_NOQUOTES in html_entity_decode that had introduced the bug (rev #185591) to other encodings. Additionaly, html_entity_decode() now doesn't decode " if ENT_NOQUOTES is given.
  
  Gustavo
- Fixed bug #52931 (strripos not overloaded with function overloading enabled).
  
  Felipe
- Fixed bug #52772 (var_dump() doesn't check for the existence of get_class_name before calling it).
  
  Kalle
  
  Gustavo
- Fixed bug #52534 (var_export array with negative key).
  
  Felipe
- Fixed bug #52327 (base64_decode() improper handling of leading padding in strict mode).
  
  Ilia
- Fixed bug #52260 (dns_get_record fails with non-existing domain on Windows).
  
  a_jelly_doughnut at phpbb dot com
  
  Pierre
- Fixed bug #50953 (socket will not connect to IPv4 address when the host has both IPv4 and IPv6 addresses, on Windows).
  
  Gustavo
  
  Pierre
- Fixed bug #50524 (proc_open on Windows does not respect cwd as it does on other platforms).
  
  Pierre
- Fixed bug #49687 (utf8_decode vulnerabilities and deficiencies in the number of reported malformed sequences). (CVE-2010-3870)
  
  Gustavo
- Fixed bug #49407 (get_html_translation_table doesn't handle UTF-8).
  
  Gustavo
- Fixed bug #48831 (php -i has different output to php --ini).
  
  Richard
  
  Pierre
- Fixed bug #47643 (array_diff() takes over 3000 times longer than php 5.2.4).
  
  Felipe
- Fixed bug #47168 (printf of floating point variable prints maximum of 40 decimal places).
  
  Ilia
- Fixed bug #46587 (mt_rand() does not check that max is greater than min).
  
  Ilia
- Fixed bug #29085 (bad default include_path on Windows).
  
  Pierre
- Fixed bug #25927 (get_html_translation_table calls the ' ' instead of ').
  
  Gustavo
zend engine
- Reverted fix for bug #51176 (Static calling in non-static method behaves like $this->).
  
  Felipe
- Changed deprecated ini options on startup from E_WARNING to E_DEPRECATED.
  
  Kalle
- Fixed NULL dereference in lex_scan on zend multibyte builds where the script had a flex incompatible encoding and there was no converter.
  
  Gustavo
- Fixed covariance of return-by-ref constraints.
  
  Etienne
- Fixed bug #53305 (E_NOTICE when defining a constant starts with __COMPILER_HALT_OFFSET__).
  
  Felipe
- Fixed bug #52939 (zend_call_function does not respect ZEND_SEND_PREFER_REF).
  
  Dmitry
- Fixed bug #52879 (Objects unreferenced in __get, __set, __isset or __unset can be freed too early).
  
  mail_ben_schmidt at yahoo dot com dot au
  
  Dmitry
- Fixed bug #52786 (PHP should reset section to [PHP] after ini sections).
  
  Fedora at famillecollet dot com
- Fixed bug #52508 (newline problem with parse_ini_file+INI_SCANNER_RAW).
  
  Felipe
- Fixed bug #52484 (__set() ignores setting properties with empty names).
  
  Felipe
- Fixed bug #52361 (Throwing an exception in a destructor causes invalid catching).
  
  Dmitry
- Fixed bug #51008 (Zend/tests/bug45877.phpt fails).
  
  Dmitry
build issues
- Fixed bug #52436 (Compile error if systems do not have stdint.h) (Sriram Natarajan)
- Fixed bug #50345 (nanosleep not detected properly on some solaris versions).
  
  Ulf
  
  Tony
- Fixed bug #49215 (make fails on glob_wrapper).
  
  Felipe
calendar extension
- Fixed bug #52744 (cal_days_in_month incorrect for December 1 BCE).
  
  gpap at internet dot gr
  
  Adam
curl extension
- Fixed bug #52828 (curl_setopt does not accept persistent streams).
  
  Gustavo
  
  Ilia
- Fixed bug #52827 (cURL leaks handle and causes assertion error (CURLOPT_STDERR)).
  
  Gustavo
- Fixed bug #52202 (CURLOPT_PRIVATE gets corrupted).
  
  Ilia
- Fixed bug #50410 (curl extension slows down PHP on Windows).
  
  Pierre
datetime extension
- Fixed bug #53297 (gettimeofday implementation in php/win32/time.c can return 1 million microsecs).
  
  ped at 7gods dot org
- Fixed bug #52668 (Iterating over a dateperiod twice is broken).
  
  Derick
- Fixed bug #52454 (Relative dates and getTimestamp increments by one day).
  
  Derick
- Fixed bug #52430 (date_parse parse 24:xx:xx as valid time).
  
  Derick
- Added support for the ( and ) delimiters/separators to DateTime::createFromFormat().
  
  Derick
dba extension
- Added Berkeley DB 5.1 support to the DBA extension.
  
  Oracle Corp.
dom extension
- Fixed bug #52656 (DOMCdataSection does not work with splitText).
  
  Ilia
filter extension
- Fixed the filter extension accepting IPv4 octets with a leading 0 as that belongs to the unsupported "dotted octal" representation.
  
  Gustavo
- Fixed bug #53236 (problems in the validation of IPv6 addresses with leading and trailing :: in the filter extension).
  
  Gustavo
- Fixed bug #50117 (problems in the validation of IPv6 addresses with IPv4 addresses and ::).
  
  Gustavo
gd extension
- Fixed bug #53492 (fix crash if anti-aliasing steps are invalid).
  
  Pierre
gmp extension
- Fixed bug #52906 (gmp_mod returns negative result when non-negative is expected).
  
  Stas
- Fixed bug #52849 (GNU MP invalid version match).
  
  Adam
hash extension
- Fixed bug #51003 (unaligned memory access in ext/hash/hash_tiger.c).
  
  Mike
  
  Ilia
iconv extension
- Fixed bug #52941 (The 'iconv_mime_decode_headers' function is skipping headers).
  
  Adam
- Fixed bug #52599 (iconv output handler outputs incorrect content type when flags are used).
  
  Ilia
- Fixed bug #51250 (iconv_mime_decode() does not ignore malformed Q-encoded words).
  
  Ilia
intl extension
- Fixed crashes on invalid parameters in intl extension.
  
  CVE-2010-4409). (Stas
  
  Maksymilian Arciemowicz
- Added support for formatting the timestamp stored in a DateTime object.
  
  Stas
- Fixed bug #50590 (IntlDateFormatter::parse result is limited to the integer range).
  
  Stas
mbstring extension
- Fixed bug #53273 (mb_strcut() returns garbage with the excessive length parameter). (CVE-2010-4156)
  
  Mateusz Kocielski
  
  Pierre
  
  Moriyoshi
- Fixed bug #52981 (Unicode casing table was out-of-date. Updated with UnicodeData-6.0.0d7.txt and included the source of the generator program with the distribution) (Gustavo).
- Fixed bug #52681 (mb_send_mail() appends an extra MIME-Version header).
  
  Adam
mssql extension
- Fixed possible crash in mssql_fetch_batch().
  
  Kalle
- Fixed bug #52843 (Segfault when optional parameters are not passed in to mssql_connect).
  
  Felipe
mysql extension
- Fixed bug #52636 (php_mysql_fetch_hash writes long value into int).
  
  Kalle
  
  rein at basefarm dot no
mysqli extension
- Fixed bug #52891 (Wrong data inserted with mysqli/mysqlnd when using mysqli_stmt_bind_param and value> PHP_INT_MAX).
  
  Andrey
- Fixed bug #52686 (mysql_stmt_attr_[gs]et argument points to incorrect type).
  
  rein at basefarm dot no
- Fixed bug #52654 (mysqli doesn't install headers with structures it uses).
  
  Andrey
- Fixed bug #52433 (Call to undefined method mysqli::poll() - must be static).
  
  Andrey
- Fixed bug #52417 (MySQLi build failure with mysqlnd on MacOS X).
  
  Andrey
- Fixed bug #52413 (MySQLi/libmysql build failure on OS X, FreeBSD).
  
  Andrey
- Fixed bug #52390 (mysqli_report() should be per-request setting).
  
  Kalle
- Fixed bug #52302 (mysqli_fetch_all does not work with MYSQLI_USE_RESULT).
  
  Andrey
- Fixed bug #52221 (Misbehaviour of magic_quotes_runtime (get/set)).
  
  Andrey
- Fixed bug #45921 (Can't initialize character set hebrew).
  
  Andrey
mysqlnd
- Fixed bug #52613 (crash in mysqlnd after hitting memory limit).
  
  Andrey
odbc extension
- Fixed bug #52512 (Broken error handling in odbc_execute).
  
  mkoegler at auto dot tuwien dot ac dot at
openssl extension
- Fixed possible blocking behavior in openssl_random_pseudo_bytes on Windows.
  
  Pierre
- Fixed bug #53136 (Invalid read on openssl_csr_new()).
  
  Felipe
- Fixed bug #52947 (segfault when ssl stream option capture_peer_cert_chain used).
  
  Felipe
oracle database extension (oci8)
- Fixed bug #53284 (Valgrind warnings in oci_set_* functions) (Oracle Corp.)
- Fixed bug #51610 (Using oci_connect causes PHP to take a long time to exit). Requires Oracle 11.2.0.2 client libraries (or Oracle bug fix 9891199) for this patch to have an effect.
  
  Oracle Corp.
pcntl extension
- Fixed bug #52784 (Race condition when handling many concurrent signals).
  
  nick dot telford at gmail dot com
  
  Arnaud
pcre extension
- Fixed bug #52971 (PCRE-Meta-Characters not working with utf-8).
  
  Felipe
- Fixed bug #52732 (Docs say preg_match() returns FALSE on error, but it returns int(0)).
  
  slugonamission at gmail dot com
phar extension
- Fixed bug #50987 (unaligned memory access in phar.c).
  
  geissert at debian dot org
  
  Ilia
php-fpm sapi
- Fixed bug #53412 (segfault when using -y).
  
  fat
- Fixed inconsistent backlog default value (-1) in FPM on many systems.
  
  fat
- Fixed bug #52501 (libevent made FPM crashed when forking -- libevent has been removed).
  
  fat
- Fixed bug #52725 (gcc builtin atomic functions were sometimes used when they were not available).
  
  fat
- Fixed bug #52693 (configuration file errors are not logged to stderr).
  
  fat
- Fixed bug #52674 (FPM Status page returns inconsistent Content-Type headers).
  
  fat
- Fixed bug #52498 (libevent was not only linked to php-fpm).
  
  fat
pdo
- Fixed bug #52699 (PDO bindValue writes long int 32bit enum).
  
  rein at basefarm dot no
- Fixed bug #52487 (PDO::FETCH_INTO leaks memory).
  
  Felipe
pdo dblib driver
- Fixed bug #52546 (pdo_dblib segmentation fault when iterating MONEY values).
  
  Felipe
pdo firebird driver
- Restored firebird support (VC9 builds only).
  
  Pierre
- Fixed bug #53335 (pdo_firebird did not implement rowCount()).
  
  preeves at ibphoenix dot com
- Fixed bug #53323 (pdo_firebird getAttribute() crash).
  
  preeves at ibphoenix dot com
pdo mysql driver
- Fixed bug #52745 (Binding params doesn't work when selecting a date inside a CASE-WHEN).
  
  Andrey
postgresql extension
- Fixed bug #47199 (pg_delete() fails on NULL).
  
  ewgraf at gmail dot com
reflection extension
- Fixed ReflectionProperty::isDefault() giving a wrong result for properties obtained with ReflectionClass::getProperties().
  
  Gustavo
- Fixed bug #53366 (Reflection doesnt get dynamic property value from getProperty()).
  
  Felipe
- Fixed bug #52854 (ReflectionClass::newInstanceArgs does not work for classes without constructors).
  
  Johannes
soap extension
- Fixed bug #44248 (RFC2616 transgression while HTTPS request through proxy with SoapClient object).
  
  Dmitry
spl extension
- Fixed bug #53362 (Segmentation fault when extending SplFixedArray).
  
  Felipe
- Fixed bug #53279 (SplFileObject doesn't initialise default CSV escape character).
  
  Adam
- Fixed bug #53144 (Segfault in SplObjectStorage::removeAll()).
  
  Felipe
- Fixed bug #53071 (SPLObjectStorage defeats gc_collect_cycles).
  
  Gustavo
- Fixed bug #52573 (SplFileObject::fscanf Segmentation fault).
  
  Felipe
- Fixed bug #51763 (SplFileInfo::getType() does not work symbolic link and directory).
  
  Pierre
- Fixed bug #50481 (Storing many SPLFixedArray in an array crashes).
  
  Felipe
- Fixed bug #50579 (RegexIterator::REPLACE doesn't work).
  
  Felipe
sqlite3 extension
- Fixed bug #53463 (sqlite3 columnName() segfaults on bad column_number).
  
  Felipe
streams
- Fixed forward stream seeking emulation in streams that don't support seeking in situations where the read operation gives back less data than requested and when there was data in the buffer before the emulation started. Also made more consistent its behavior -- should return failure every time less data than was requested was skipped.
  
  Gustavo
- Fixed bug #53241 (stream casting that relies on fdopen/fopencookie fails with streams opened with, inter alia, the 'xb' mode).
  
  Gustavo
- Fixed bug #53006 (stream_get_contents has an unpredictable behavior when the underlying stream does not support seeking).
  
  Gustavo
- Fixed bug #52944 (Invalid write on second and subsequent reads with an inflate filter fed invalid data).
  
  Gustavo
- Fixed bug #52820 (writes to fopencookie FILE* not commited when seeking the stream).
  
  Gustavo
wddx extension
- Fixed bug #52468 (wddx_deserialize corrupts integer field value when left empty).
  
  Felipe
zlib extension
- Fixed bug #52926 (zlib fopen wrapper does not use context).
  
  Gustavo

PHP 5.3

Represents a security release

PHP 5.3.4

Source Code

Change Log

misc

security enhancements

general improvements

implemented feature requests

improved mysqlnd

improved php-fpm sapi

core

zend engine

build issues

calendar extension

curl extension

datetime extension

dba extension

dom extension

filter extension

gd extension

gmp extension

hash extension

iconv extension

intl extension

mbstring extension

mssql extension

mysql extension

mysqli extension

mysqlnd

odbc extension

openssl extension

oracle database extension (oci8)

pcntl extension

pcre extension

phar extension

php-fpm sapi

pdo

pdo dblib driver

pdo firebird driver

pdo mysql driver

postgresql extension

reflection extension

soap extension

spl extension

sqlite3 extension

streams

wddx extension

zlib extension

PHP 5.3