The PHP development team would like to announce the immediate availability of PHP 5.3.3. This release focuses on improving the stability and security of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users are encouraged to upgrade to this release.

Backwards incompatible change:

• Methods with the same name as the last element of a namespaced class name will no longer be treated as constructor. This change doesn't affect non-namespaced classes.

  <?php
namespace Foo;
class Bar {
    public function Bar() {
        // treated as constructor in PHP 5.3.0-5.3.2
        // treated as regular method in PHP 5.3.3
    }
}
?>

  There is no impact on migration from 5.2.x because namespaces were only introduced in PHP 5.3.

Security Enhancements and Fixes in PHP 5.3.3:

• Rewrote var_export() to use smart_str rather than output buffering, prevents data disclosure if a fatal error occurs (CVE-2010-2531).
• Fixed a possible resource destruction issues in shm_put_var().
• Fixed a possible information leak because of interruption of XOR operator.
• Fixed a possible memory corruption because of unexpected call-time pass by refernce and following memory clobbering through callbacks.
• Fixed a possible memory corruption in ArrayObject::uasort().
• Fixed a possible memory corruption in parse_str().
• Fixed a possible memory corruption in pack().
• Fixed a possible memory corruption in substr_replace().
• Fixed a possible memory corruption in addcslashes().