Home » Releases » 7.2 » 7.2.34 »

PHP 7.2.34

PHP 7.2 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

Source Code

Change Log

  • core

    • Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (CVE-2020-7070)
      Stas
  • openssl

    • Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV). (CVE-2020-7069)
      Jakub Zelenka

PHP 7.2


  Represents a security release