Home » Releases » 7.2 » 7.2.34 »

PHP 7.2.16

PHP 7.2 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.2 is 7.2.34 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).
      Laruence
    • Fixed bug #77630 (rename() across the device may allow unwanted access during processing).
      Stas
  • com

    • Fixed bug #77621 (Already defined constants are not properly reported).
      cmb
  • exif

    • Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
      Stas
    • Fixed bug #77540 (Invalid Read on exif_process_SOFn).
      Stas
    • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
      Stas
    • Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
      Stas
  • pdo_oci

    • Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.
      Cameron Porter
  • phar

    • Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
      bishop
  • spl

    • Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).
      Ahmed Abdou
    • Fixed bug #77431 (openFile() silently truncates after a null byte).
      cmb
  • standard

    • Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
      John Stevenson
  • mysql

    • Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.
      Darek Slusarczyk

PHP 7.2


  Represents a security release