The PHP 5.2.2 is finally out and can be downloaded at the following URL:
http://www.php.net/downloads.php#v5
The release fixes over 120 different bugs in PHP and resolves the majority of
MOPB issues identified by Stefan Esser as well as some security bugs that were identified by other security researchers as well as PHP's own developers. You can find out the full details of the changes made via the
release announcement as well as the
line-by-line changelog.
I recommend that all users consider upgrading to this release regardless of the version that they are currently running. However, if you must stay on PHP 4,
Derick had released PHP 4.4.7 today as well that contains relevant security fixes.