Improved LCG entropy. (Rasmus, Samy Kamkar)Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

Added support for SHA-256 and SHA-512 to php's crypt.Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check.Fixed bug51059 (crypt crashes when invalid salt are given).Fixed bug 50940 Custom content-length set incorrectly in Apache sapis.Fixed bug 50847 (strip_tags() removes all tags greater then 1023 bytes long).
crash).Fixed bug 50661 (DOMDocument::loadXML does not allow UTF-16).Fixed bug #50632 (filter_input() does not return default value if the variable does not exist).Fixed bug 50540 (Crash while running ldap_next_reference test cases).Fixed bug 49851 (http wrapper breaks on 1024 char long headers).Over 60 other bug fixes.
For users upgrading from PHP 5.2 there is a migration guide available here, detailing the changes between those releases and PHP 5.3. set incorrectly in Apache sapis.Fixed bug 50847 (strip_tags() removes all tags greater then 1023 bytes long).Fixed bug 50723 (Bug in garbage collector causes crash).Fixed bug 50661 (DOMDocument::loadXML does not allow UTF-16).Fixed bug 50632 (filter_input() does not return default value if the variable does not exist).Fixed bug50540 (Crash while running ldap_next_reference test cases).Fixed bug 49851 (http wrapper breaks on 1024 char long headers).Over 60 other bug fixes.For users upgrading from PHP 5.2 there is a migration guide available here, detailing the changes between those releases and PHP 5.3.