In March 2009, PHP 5.3 entered Debian Experimental, but until recently, there was no Suhosin patch for PHP 5.3. As of version 5.3.0-3, which was uploaded to experimental on August 25th, the Suhosin patch was enabled again, so I backported this version to Lenny.
As with every version that has ever been available from debian.dev-zero. nl, a patch was added, that disables the safe mode check for a possible fifth argument of the mail() function. This means that even in safe mode, extra parameters can be passed to the MTA. Please be aware of the security implications this might have. Other than that, no changes were made.
Please see this post for information on how to use these packages. As of now, PHP 5.3 is available for amd64 only. Packages for i386 will follow shortly.
Update September 17th:
i386 packages are now available.
