We've fully upgraded our webserver software to the new generation. We're now running Apache 2 with the latest version of PHP4.
You can find details on the new setup here. The biggest change is execute-as-user, all scripts run as the user who owns them. That should allow everyone to run a wider range of web applications. However, that also means that an insecure web application can lead to devastation effects, including loss if data. We would adive anyone running php (or cgi) software in their webspace to keep it up to date, regularly updating as new versions are released.
