The PHP development team has released PHP 5.2.13, which contains over forty bug fixes, including a number security updates related to data randomization, safe_mode validation and a possible open_basedir/safe_mode bypass in the session extension.

Other notable updates include updating strip_tags() so that it no longer removes tags longer than 1,023 bytes if they are in the exclude list and fixing the date() function so that it shows the correct year. The full changelog can be found on the PHP site, where you can also read the full release announcement.

All users of 5.2 should look at upgrading to this newest release, especially since it includes security enhancements. Source and binaries for 5.2.13 are available on the php.net downloads page. If you are using 5.0 or 5.1, there is an upgrade guide to help you move up to 5.2.13.