Month Of PHP Security - The new phar extension in PHP 5.3 contains a format string vulnerability in the internal phar_wrapper_unlink() function. PHP versions 5.3 through 5.3.2 are affected.
4ce334e3edd4d8288ec7000354d42d816187ad32fe0257ee77eae10b958c8e2b