PHP Development Team is proud to announce the release of PHP PHP 4.3.7. This is a maintenance release that in addition to several non-critical bug fixes, addresses an input validation vulnerability in escapeshellcmd() and escapeshellarg() functions on the Windows platform. Users of PHP on Windows are encouraged to upgrade to this release as soon as possible.
All in all this release fixes over 30 bugs that have been discovered and resolved since the 4.3.6 release. For a full list of changes in PHP 4.3.7, see the ChangeLog.