PHP 5.3.10 was released today: "...This release delivers a critical security fix." http://php.net
Fixed arbitrary remote code execution vulnerability reported by Stefan Esser, CVE-2012-0830. http://php.net/ChangeLog-5.php#5.3.10