On the main PHP site there's a new announcement about a critical update in a new version to both the PHP 5.2.x and 5.3.x series of releases to correct a problem that could cause a hang or crash from user input - 5.3.5 and 5.2.17.

The PHP development team would like to announce the immediate availability of PHP 5.3.5 and 5.2.17. This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers. The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from the command line.

All users are strongly encouraged to update their releases. While the problem only happens in certain circumstances, it can still be a huge problem since the data comes directly from the user. For more information about the issue see this post.

Christopher Jones has posted about the latest Instant Client release for the Intel chips running OS X:

Hot off the press, Kuassi points out that Oracle Instant Client for Apple Mac OS X (Intel x86) is now available from the Instant Client page on OTN. It's the latest 10.2.0.4 patchset.

The 10.2.0.4 release of Instant Client for Windows 32bit and Linux x86 have also been released.

The Oracle Instant Client is a lightweight version of the standard Oracle functionality that's not only smaller but allows installation of an Oracle client without having to do the full Oracle install.