The PHP project has just released the latest versions in the PHP 5.4.x and 5.3.x series - PHP 5.4.4 & 5.3.14:

The PHP development team would like to announce the immediate availability of PHP 5.4.4 and PHP 5.3.14. All users of PHP are encouraged to upgrade to PHP 5.4.4 or PHP 5.3.14. The release fixes multiple security issues: A weakness in the DES implementation of crypt and a heap overflow issue in the phar extension. PHP 5.4.4 and PHP 5.3.14 fixes over 30 bugs. Please note that the use of php://fd streams is now restricted to the CLI SAPI.

As always, you can download this latest release from either the downloads page (source) or from the Windows site (binaries). See the Changelog for the full list of updates.