The PHP development team would like to announce the immediate availability of PHP 5.3.5 and 5.2.17. This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers. The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from the command line.

All users are strongly encouraged to update their releases. While the problem only happens in certain circumstances, it can still be a huge problem since the data comes directly from the user. For more information about the issue see this post.

Hot off the press, Kuassi points out that Oracle Instant Client for Apple Mac OS X (Intel x86) is now available from the Instant Client page on OTN. It's the latest 10.2.0.4 patchset.

The 10.2.0.4 release of Instant Client for Windows 32bit and Linux x86 have also been released.

The Oracle Instant Client is a lightweight version of the standard Oracle functionality that's not only smaller but allows installation of an Oracle client without having to do the full Oracle install.