PHP 7.2 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.2.14 is not recommended. PHP 7.2.34 is the latest version in the series.
Downloads
Source Code
Git Clone
Use Git to clone the 7.2.14 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.2.14
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-7.2.14-x64NTS.zip (24.68 MiB)
php-7.2.14-x86NTS.zip (23.02 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-7.2.14-x64TS.zip (24.81 MiB)
php-7.2.14-x86TS.zip (23.10 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.14-cli-alpine
Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.2.14-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.14-fpm-alpine
Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.2.14-apache
Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.2.14-fpm
ChangeLog
Core
- Fixed bug #77369 (memcpy with negative length via crafted DNS response).
- Fixed bug #71041 (
zend_signal_startup()
needsZEND_API
). - Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
COM
- Fixed bug #77177 (Serializing or unserializing COM objects crashes).
Date
- Fixed bug #77097 (
DateTime::diff
gives wrong diff when the actual diff is less than 1 second).
Exif
- Fixed bug #77184 (Unsigned rational numbers are written out as signed rationals).
GD
- Fixed bug #77269 (
efree()
on uninitialized Heap data in imagescale leads to use-after-free). - Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
- Fixed bug #77195 (Incorrect error handling of
imagecreatefromjpeg()
). - Fixed bug #77198 (auto cropping has insufficient precision).
- Fixed bug #77200 (imagecropauto(…, GD_CROP_SIDES) crops left but not right).
IMAP
- Fixed bug #77020 (null pointer dereference in imap_mail).
Mbstring
- Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
- Fixed bug #77371 (heap buffer overflow in mb regex functions - compile_string_node).
- Fixed bug #77381 (heap buffer overflow in multibyte match_at).
- Fixed bug #77382 (heap buffer overflow due to incorrect length in expand_case_fold_string).
- Fixed bug #77385 (buffer overflow in fetch_token).
- Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
- Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
OCI8
- Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
- Added
oci_set_call_timeout()
for call timeouts. - Added
oci_set_db_operation()
for the DBOP end-to-end-tracing attribute.
Opcache
- Fixed bug #77215 (CFG assertion failure on multiple finalizing switch frees in one block).
PDO
- Handle invalid index passed to
PDOStatement::fetchColumn()
as error.
Phar
- Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
Sockets
- Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).
SQLite3
- Fixed bug #77051 (Issue with re-binding on SQLite3).
Xmlrpc
Commit List
Alexander Kurilo
- Regenerate certificates for openssl tests in 655fb96354
- Regenerate certificates for openssl tests in 0382e761d7
- Regenerate certs for openssl tests in c725b782d9
Anatol Belski
- Fix libtidy exports when
ext/tidy
compiled static in 0d166f76ee - Fix syntax error in 81207fc607
BohwaZ
- Fix #77051: Issue with re-binding on SQLite3 in 94ec262fca
Christopher Jones
- Simplify based on feedback from nikic in b797818e09
- Update NEWS in 8ff6a30598
- Bump OCI8 version in 2d53040a6d
- Fix resource warning value in dd0a8091f4
- Don't skip with 18c DB in 9a0ec35fa3
- Note that PECL install now works on PHP 7.3 in 43adf3dc5e
- Convert some parameter parsing to the Fast Parameter Parsing API in 216d6592e1
- Update OCI8 README in 465c149cd3
- Enable Oracle Database DBOP tracing attribute in 4246702406
- Upgrade internal OCI call in e2ecd60f2f
- Add
oci_set_call_timeout()
and bump version to 2.10.0 in 99f1f3dedf - Update for newer Oracle versions in 56e2c0d7db
- Improve test portability in e4d894edb3
- Bundle the new test in 444e400c3b
- LOL I had 2.10 on my mind in 3aee9ca571
Christoph M. Becker
- Fix #77177: Serializing or unserializing COM objects crashes in 115ee49b0b
- Fix #77195: Incorrect error handling of
imagecreatefromjpeg()
in 60a9f7a3a3 - Fix test case in 5af5f56fc9
- Fix #77198: auto cropping has insufficient precision in b47b8886dd
- Fix #77200: imagecropauto(…, GD_CROP_SIDES) crops left but not right in a1aaec08b5
Colin Basnett
- Fixed bug #77184 in 9ec519e094
Derick Rethans
- Fixed bug #77097 (
DateTime::diff
gives wrong diff when the actual diff is less than 1 second) by upgrading to timelib 2017.09 in a3f2871b8e
Ferenc Kovacs
- 5.6.40 will be next. probably not in c26cb383a5
Frank Denis
ext/sodium
: Correct base64 decoding with unpadded variants in 542d0bce50ext/sodium
: remove redundant code in ff02d50909
KoenigsKind
- When releasing an oci8 connection always set the resource to null in 3c91851874
Mizunashi Mana
- Define __APPLE_USE_RFC_3542 for new ipv6 constants in e672cd4385
Nikita Popov
- Fixed bug #76046 in d6595f276f
- Improve fix for #76046 in b565c85b9e
- Fixed bug #77215 in 17f8b9fb36
- Drop unnecessary HASH_OF uses in ext/oci8 in e3946534a4
Philip Prindeville
- Don't need interactive progress on git clones in Travis in 61af343768
Remi Collet
- missing entry for #77020 in 9b8f2417ad
- missing entry for #77020 in 431ff36f51
- add imap.enable_insecure_rsh in php.ini in 4288674651
- Update CREDITS for PHP 7.2.14RC1 in 66778cd2f4
- missing entry for #77020 in 8240cf0fda
- cleanup merge in f25ad94494
- Update versions for PHP 7.2.14 in 643a161a24
Sara Golemon
- Bump for 7.2.14 in 9fc52c16b5
- Prep for 7.1.26 in 0b3cbd665e
Sergei Morozov
- Check column number before trying to fetch the value in e126ca1557
Stanislav Malyshev
- Disable rsh/ssh functionality in imap by default (bug #77153) in e5bfea64c8
- Disable rsh/ssh functionality in imap by default (bug #77153) in 628df47e79
- Disable rsh/ssh functionality in imap by default (bug #77153) in 05782f01f5
- Disable rsh/ssh functionality in imap by default (bug #77153) in 336d2086a9
- Add DISPLAY_INI_ENTRIES for imap in d8765852e0
- Fix bug #77022 - use file mode or umask for new files in 69f5e7992b
- Improve test for bug77022 in 2fba1e2f59
- Fix TSRM signature -
php_stream_stat
macro has it's own TSRM in aabdb71dc3 - Fix #77020: null pointer dereference in imap_mail in 7edc639b9f
- Fix bug #77143 - add more checks to buffer reads in 54212674b9
- Fix bug #77143 - add more checks to buffer reads in 48f0f73f75
- Fix null pointer deref in qprint-encode filter (bug #77231) in 78bffa72c1
- Fix tests - newer versions check Unicode in f94b81ce48
Valentin V. Bartenev
- Fix bug #71041 dynamic embed SAPI load error in 11ddf7669a