PHP 5.4.1 has more than 20 bug fixes, including some related to security. One security bug concerned insufficient validating of the an upload name, which then led to corrupted
$_FILES indices. Another notable change was
open_basedir checks being added to
The PHP 5.3.11 update fixes nearly 60 bugs including correcting a regression in a previously applied security fix for the
magic_quotes_gpc directive. A new debug info handler was also added to DOM objects, and the developers have added support for version 2.4 of the Apache web server.
A full list of improvements and bug fixes for both versions can be found in the PHP 5 change log. PHP 5.4.1 and 5.3.11 are available to download as source or as Windows binaries from the project’s site. PHP is distributed under the terms of the PHP License v3.01.