Home » Releases » 7.2 » 7.2.34 »

PHP 7.2.19

PHP 7.2 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.2 is 7.2.34 which includes important security patches.

Source Code

Change Log

  • date

    • Fixed bug #77909 (DatePeriod::__construct() with invalid recurrence count value).
      Ignace Nyamagana Butera
  • exif

    • Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040)
      Stas
  • fpm

    • Fixed bug #77934 (php-fpm kill -USR2 not working).
      Jakub Zelenka
    • Fixed bug #77921 (static.php.net doesn't work anymore).
      Peter Kokot
  • gd

    • Fixed bug #77943 (imageantialias($image, false); does not work).
      cmb
    • Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038)
      cmb
  • iconv

    • Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow).
      CVE-2019-11039). (maris dot adam
  • json

    • Fixed bug #77843 (Use after free with json serializer).
      Nikita
  • opcache

    • Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset.
      Alexey Kalinin
      Dmitry
  • pdo_mysql

    • Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
      cmb
  • reflection

    • Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
      Nikita
  • session

    • Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
      cmb
  • spl

    • Fixed bug #77024 (SplFileObject::__toString() may return array).
      Craig Duncan
  • sqlite

    • Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).
      Stas

PHP 7.2


  Represents a security release