xref: /web-php/releases/5_3_4.php (revision f1cb7e74) 
1<?php
2$_SERVER['BASE_PAGE'] = 'releases/5_3_4.php';
3include_once __DIR__ . '/../include/prepend.inc';
4site_header("PHP 5.3.4 Release Announcement");
5?>
6
7<h1>PHP 5.3.4 Release Announcement</h1>
8<p>
9The PHP development team is proud to announce the immediate release of PHP
105.3.4. This is a maintenance release in the 5.3 series, which includes a
11large number of bug fixes.
12</p>
13
14<p>
15<b>Security Enhancements and Fixes in PHP 5.3.4:</b>
16</p>
17<ul>
18  <li>Fixed crash in zip extract method (possible CWE-170).</li>
19  <li>Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).</li>
20  <li>Fixed a possible double free in imap extension (Identified by Mateusz
21    Kocielski). (CVE-2010-4150).</li>
22  <li>Fixed NULL pointer dereference in ZipArchive::getArchiveComment.
23    (CVE-2010-3709).</li>
24  <li>Fixed possible flaw in open_basedir (CVE-2010-3436).</li>
25  <li>Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).</li>
26  <li>Fixed symbolic resolution support when the target is a DFS share.</li>
27  <li>Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with
28    large amount of data) (CVE-2010-3710).</li>
29</ul>
30
31<p>
32<b>Key Bug Fixes in PHP 5.3.4 include:</b>
33</p>
34<ul>
35  <li>Added stat support for zip stream.</li>
36  <li>Added follow_location (enabled by default) option for the http stream
37    support.</li>
38  <li>Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.</li>
39  <li>Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect
40    zend multibyte at runtime.</li>
41  <li>Multiple improvements to the FPM SAPI.</li>
42  <li>Over 100 other bug fixes.</li>
43</ul>
44
45<p>
46For users upgrading from PHP 5.2 there is a migration guide
47available <a href="http://php.net/migration53">here</a>, detailing
48the changes between those releases and PHP 5.3.
49</p>
50
51<p>
52 For a full list of changes in PHP 5.3.4, see the
53 <a href="/ChangeLog-5.php#5.3.4">ChangeLog</a>.
54</p>
55
56<?php site_footer(); ?>
57