On March 14th 2013, the PHP group has released PHP 5.3.23.
These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13.
The corresponding packages are now available on Dotdeb for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with the following changes :
- php5-xdebug as been upgraded to version 2.2.2
- php5-apc fixes a bug in relative path search when apc.stats = 0
As usual, please read the ChangeLog before upgrading and be sure to use to the latest packages before reporting any issue.