PHP Release 5.3.15


    PHP 5.3.15 Release Announcement

    The PHP development team would like to announce the immediate availability of PHP 5.3.15. Over 30 bugs were fixed, including a security related overflow issue in the stream implementation. All users of PHP are encouraged to upgrade to this release.

    For source downloads of PHP 5.3.15 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    Change Logs
    zend engine
    • Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that includes a semi-colon).
    com
    • Fixed bug #62146 com_dotnet cannot be built shared.
    core
    • Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
    • Fixed bug #62432 (ReflectionMethod random corrupt memory on high concurrent).
    • Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt).
    fileinfo
    • Fixed magic file regex support.
    fpm
    • Fixed bug #61045 (fpm don't send error log to fastcgi clients).
    • Fixed bug #61835 (php-fpm is not allowed to run as root).
    • Fixed bug #61295 (php-fpm should not fail with commented 'user' for non-root start).
    • Fixed bug #61026 (FPM pools can listen on the same address).
    • Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
    • Fixed bug #62153 (when using unix sockets, multiples FPM instances can be launched without errors).
    • Fixed bug #62160 (Add process.priority to set nice(2) priorities).
    • Fixed bug #61218 (FPM drops connection while receiving some binary values in FastCGI requests).
    • Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
    intl
    • Fixed bug #62083 (grapheme_extract() memory leaks).
    • Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called twice).
    • Fixed bug #62070 (Collator::getSortKey() returns garbage).
    • Fixed bug #62017 (datefmt_create with incorrectly encoded timezone leaks pattern).
    • Fixed bug #60785 (memory leak in IntlDateFormatter constructor).
    json
    • Reverted fix for bug #61537.
    phar
    • Fixed bug #62227 (Invalid phar stream path causes crash).
    reflection
    • Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfault).
    • Fixed bug #62202 (ReflectionParameter::getDefaultValue() memory leaks with constant).
    spl
    • Fixed bug #62262 (RecursiveArrayIterator does not implement Countable).
    sqlite
    • Fixed open_basedir bypass, CVE-2012-3365.
    xml writer
    • Fixed bug #62064 (memory leak in the XML Writer module).
    zip
    • Upgraded libzip to 0.10.1
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top