From php.net
The PHP development team is proud to announce the release of PHP 5.1.2.
This release combines small feature enhancements with a fair number of bug fixes and addresses three security issues. All PHP 5 users are encouraged to upgrade to this release.
The security issues resolved include the following:
* HTTP Response Splitting has been addressed in ext/session and in the
header() function. Header() can no longer be used to send multiple response headers in a single call.
* Format string vulnerability in ext/mysqli.
* Possible cross-site scripting problems in certain error conditions.
The feature enhancements include the following notables:
* Hash extension was added to core and is now enabled by default. This extension provides support for most common hashing algorithms without reliance on 3rd party libraries.
* XMLWriter was added and enabled by default.
* New OCI8 extension that includes numerous fixes.
* PNG compression support added to the GD extension.
* Added --enable-gcov configure option to enable C-level code coverage.
* getNamespaces() and getDocNamespaces() methods added to SimpleXML extension.
The release also includes over 85 bug fixes with a focus on:
* Correction of the many regressions in the strtotime() function.
* Fixes of several crashes, leaks and memory corruptions found in the imap, pdo, gd, mysqli, mcrypt and soap extensions.
* Corrected problems with the usage of SSI and virtual() in the Apache2 SAPI.
* Build fixes for iconv and sybase_ct extensions.
* Fixed the previously broken Sun(rise|set) functions.
* SQLite libraries upgraded to 2.8.17 and 3.2.8
* Win32 binaries now include libxml2-2.6.22 and libxslt-1.1.15.
The full details of the changes in PHP 5.1.2 can be found here:
http://www.php.net/ChangeLog-5.php#5.1.2
PHP Development Team.