PHP 5.4.4 and 5.3.14 releases fix security vulnerabilities
The PHP developers have released updates to both the 5.4 and 5.3 branches of the language. The updates fix two security vulnerabilities and more than thirty other bugs. A vulnerability in the DES implementation of the language's crypt() function has been patched along with a heap overflow in PHP's phar extension. Details of the additional bug fixes can be found in the PHP 5 changelog.
PHP 5.4.4 and 5.3.14 can be downloaded in source form or as pre-compiled Windows binaries from the project's web site. PHP is released under the PHP License v3.01.
(fab)