The PHP development team announces the immediate availability of PHP 5.4.13 and PHP 5.3.23. These releases fix about 15 bugs, including fixes for CVE-2013-1643 and CVE-2013-1635. All users of PHP are encouraged to upgrade to PHP 5.4.13.

For source downloads of PHP 5.4.13 and PHP 5.3.23 please visit our downloads page, Windows binaries can be found on windows.php.net/download/.

The list of changes are recorded in the ChangeLog.

Source