PHP 5.3.11 Release Announcement
The PHP development team announces the immediate availability of
PHP 5.3.11. This release focuses on improving the stability of the
PHP 5.3 branch with over 60 bug fixes, some of which are security related.
Security Enhancements for PHP 5.3.11:
- Fixed bug #61043 (Regression in magic_quotes_gpc fix for CVE-2012-0831).
Reported by Stefan Esser. (Ondřej Surý)
- Fixed bug #54374 (Insufficient validating of upload name leading to
corrupted $_FILES indices). (CVE-2012-1172). (Stas, lekensteyn at
gmail dot com, Pierre)
- Add open_basedir checks to readline_write_history and readline_read_history.
(Rasmus, reported by Mateusz Goik)
Key enhancements in PHP 5.3.11 include:
- Added debug info handler to DOM objects. (Gustavo, Joey Smith)
- Fixed bug #61172 (Add Apache 2.4 support). (Chris Jones)
For a full list of changes in PHP 5.3.11, see the ChangeLog. For source downloads please visit
our downloads page, Windows binaries can be found
on windows.php.net/download/.
All users of PHP 5.3 are strongly encouraged to upgrade to PHP 5.3.11.