PHP 7.2 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.2.16 is not recommended. PHP 7.2.34 is the latest version in the series.
Downloads
Source Code
Git Clone
Use Git to clone the 7.2.16 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.2.16
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-7.2.16-x64NTS.zip (24.69 MiB)
php-7.2.16-x86NTS.zip (23.05 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-7.2.16-x64TS.zip (24.83 MiB)
php-7.2.16-x86TS.zip (23.11 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.16-cli-alpine
Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.2.16-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.16-fpm-alpine
Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.2.16-apache
Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.2.16-fpm
ChangeLog
Core
- Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).
- Fixed bug #77630 (
rename()
across the device may allow unwanted access during processing).
COM
- Fixed bug #77621 (Already defined constants are not properly reported).
EXIF
- Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
- Fixed bug #77540 (Invalid Read on exif_process_SOFn).
- Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
- Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
PDO_OCI
- Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.
PHAR
- Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
SPL
- Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).
- Fixed bug #77431 (openFile() silently truncates after a null byte).
Standard
- Fixed bug #77552 (Unintialized
php_stream_statbuf
in stat functions).
MySQL
- Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or
PDO::MYSQL_ATTR_LOCAL_INFILE
attribute for pdo_mysql.
Commit List
Ahmed Abdou
- Fix bug #51068 (glob:// do not support current path relative) in ec28d4c247
Anatol Belski
- Sync test for libcurl 7.64.0 in c9f0e12353
- Sync test with changes in libcurl 7.64.0 in e27301c7b3
- Update SDK version for AppVeyor in e74a918621
- Replace broken binary SDK version in 186b5de575
- Fix test portability in feebf5a2cf
Ben Ramsey
- Fixed bug #77564: Memory leak in exif_process_IFD_TAG in c4294440ff
Cameron Porter
- pdo_oci: Add PDO_OCI_ATTR_ACTION and CLIENT_INFO in a095472e62
- pdo_oci: Register new attr constants and add tests in fc940f0703
- pdo_oci: Add client identifier and module attrs in 38363f4820
Christopher Jones
- PDO_OCI tracing attribute PR merge in 1f86dcdd13
Christoph M. Becker
- Prepare main branch for PHP 7.2.16 in cbc5a141f7
- Fix #77621: Already defined constants are not properly reported in de738496c2
DanielCiochiu
- Fixed bug #75546 in 07877c46e3
Darek Slusarczyk
- security fix - by default 'local infile' is disabled: in 2eaabf06fc
Derick Rethans
- Use pkg-config for ICU, as the old icu-config has been deprecated in e2edaa0cee
- Use pkg-config for ICU, as the old icu-config has been deprecated in 65d81833bb
Dmitry Stogov
- Avoid dependency on "struct flock" fields order in 9222702633
hsldymq
- Make pid & uid available while handling realtime signals in b5cb3ac8ec
johnstevenson
- Fix #77552: Uninitialized buffer in stat functions in fe4d7248cc
Kevin Abel
- Fix bug 76596: phpdbg supports display_errors=stderr in 3890c8bce5
Nikita Popov
- Remove "defensive copy" of DatePeriod properties in a109fddba4
- Fixed bug #77608 in 8e34de4756
- Make MADV_HUGEPAGE conditional on USE_ZEND_ALLOC_HUGE_PAGES in 928c42211f
Peter Kokot
- Refactor timelib.m4 in 0ffa84d740
Remi Collet
- Update CREDITS for PHP 7.2.16RC1 in 2e3d77718d
- add NEWS entries in 5829fd84b4
- add NEWS entry in fec3564025
- Update versions for PHP 7.2.16 in 260468acea
Tyson Andre
- Properly check for
array_replace_recursive
insccp.c
in cf56832d00
Xinchen Hui
- Fixed bug #77589 (Core dump using parse_ini_string with numeric sections) in 92055ca79b
YanTao
- Fix FTPS passive mode of data channel event poll in 3b09123de3