Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.2 » 7.2.34 »

PHP 7.2.26

PHP 7.2 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.2 is 7.2.34 which includes important security patches.

Source Code

Change Log

  • bcmath

    • Fixed bug #78878 (Buffer underflow in bc_shift_addsub).
      CVE-2019-11046). (cmb

  • core

    • Fixed bug #78862 (link() silently truncates after a null byte on Windows).
      CVE-2019-11044). (cmb
    • Fixed bug #78863 (DirectoryIterator class silently truncates after a null byte).
      CVE-2019-11045). (cmb

  • exif

    • Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
      CVE-2019-11050). (Nikita
    • Fixed bug #78910 (Heap-buffer-overflow READ in exif).
      CVE-2019-11047). (Nikita

  • gd

    • Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW).
      cmb

  • intl

    • Fixed bug #78804 (Segmentation fault in Locale::filterMatches).
      Stas

  • opcache

    • Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
      Tyson Andre

  • standard

    • Fixed bug #78759 (array_search in $GLOBALS).
      Nikita
    • Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
      cmb
    • Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
      cmb

PHP 7.2


  Represents a security release