PHP 7.2 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.2.17 is not recommended. PHP 7.2.34 is the latest version in the series.
Downloads
Source Code
Git Clone
Use Git to clone the 7.2.17 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.2.17
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-7.2.17-x64NTS.zip (24.69 MiB)
php-7.2.17-x86NTS.zip (23.05 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-7.2.17-x64TS.zip (24.83 MiB)
php-7.2.17-x86TS.zip (23.13 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.17-cli-alpine
Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.2.17-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.17-fpm-alpine
Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.2.17-apache
Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.2.17-fpm
ChangeLog
Core
- Fixed bug #77738 (Nullptr deref in
zend_compile_expr
). - Fixed bug #77660 (Segmentation fault on break 2147483648).
- Fixed bug #77652 (Anonymous classes can lose their interface information).
- Fixed bug #77676 (Unable to run tests when building shared extension on AIX).
Bcmath
- Fixed bug #77742 (
bcpow()
implementation related to gcc compiler optimization).
COM
- Fixed bug #77578 (Crash when php unload).
Date
- Fixed bug #50020 (DateInterval:createDateFromString() silently fails).
- Fixed bug #75113 (Added
DatePeriod::getRecurrences()
method).
EXIF
- Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
- Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). (CVE-2019-11035)
FPM
- Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
GD
- Fixed bug #77700 (Writing truecolor images as GIF ignores interlace flag).
MySQLi
- Fixed bug #77597 (mysqli_fetch_field hangs scripts).
Opcache
- Fixed bug #77691 (Opcache passes wrong value for inline array push assignments).
- Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical successors).
phpdbg
- Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match actual aliases).
sodium
- Fixed bug #77646 (
sign_detached()
strings not terminated).
SQLite3
- Added sqlite3.defensive INI directive.
Standard
- Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper).
- Fixed bug #77669 (Crash in
extract()
when overwriting extracted array). - Fixed bug #76717 (
var_export()
does not create a parsable value forPHP_INT_MIN
). - Fixed bug #77765 (FTP stream wrapper should set the directory as executable).
Commit List
Abyr Valg
- OpenSSL: Improve non-blocking eof test in 74888bede8
Anatol Belski
- Sync with behavior change in OpenSSL 1.1.1b in 19a44ffb7b
- Fix test portability in 040196972c
- Sync with behavior change in OpenSSL 1.1.1b in 66bd861fcd
- Die hard if mc.exe or mt.exe not found in 6814ba11bc
bohwaz
- SQLite3: add DEFENSIVE config for SQLite >= 3.26.0 as a mitigation strategy against potential security flaws in e93259bb23
Christopher Jones
- Correct
skipif
use for OCI8 password tests in 7a9c20f3fd
Christoph M. Becker
- Fix #77431 SplFileInfo::__construct() accepts NUL bytes in 254a5914ad
- Fix #77700: Writing truecolor images as GIF ignores interlace flag in 41fb0eaa11
- Add bison version check to configure in f21c054903
- Fix #77578: Crash when php unload in 41bc51ce2d
- Pointer arithmetic on void pointers is illegal in d1df5d54be
Derick Rethans
- Fixed bug #50020 (DateInterval:createDateFromString() silently fails) in a890c5beb8
- Fixed 7.2 compat issue in ab07bc1fff
Frank Denis
- Fix bug #77646 in 08089b575b
Ignace Nyamagana Butera
- Fixed bug #75113: Added
DatePeriod::getRecurrences()
method in 6eb83a63e1
Jakub Zelenka
- Use spaces instead of tabs in bug 77390 test in c814b34b1d
- Print empty string in test for but 77390 just once in 01c00953ff
- Speed up TLS wrapper tests when SSLv3 disabled in 769d2d9b62
Jay Satiro
- curl_error: return an empty string if no error occurred in 5025eb05bd
Joe Watkins
- bump versions after release in 58c5df3d37
- fix news in b6308f5b48
Kevin Adler
- Fix bug #77677: WCOREDUMP not available on all systems in 006355c9fa
- Fix shared module generation on AIX bug #77676 in 700f876a1a
Miriam Lauter
- Fix #77767: phpdbg break command help message shows incorrect aliases in 09e522322a
Nikita Popov
- Fixed bug #77597 in 934691fabb
- Fixed bug #77652 in 5388143855
- Fix inference warning about missing key type in 2cfb09caa7
- Fix assertion in
Exception::getMessage()
if $message is a ref in af37d58cf7 - Fixed bug #77669 in 9ad9cc71ff
- Fixed bug #77691 in 3f00c9367d
- Fixed bug #76717 in 1fd32e9c2f
- Fixed bug #77742 in e7d40afb7a
- Don't immediately destroy curl pushfunction in 97f9fd6949
- Fix unused variable warning in a573c0e9ed
- Fixed bug #77743 in 54bf8c820f
- Partial fix for bug #77751 in 4f03401628
- Allow DateTimeImmutable in
datefmt_format_object()
in 433758ceb3 - Make test independent of icu version in b3a669bec1
Pedro Magalhães
- Added test for #77535 fix in f167b06d4c
Peter Kokot
- Update NEWS in c39fb1fc4f
- Update NEWS in 637713c1a4
- Update editorconfig in 488544b336
Ralf Habacker
- Fix #77609: Tests from mailparse extension fails in 3ead672394
Remi Collet
- bump version to 7.2.17-dev in b243f2feca
- add NEWS entries in 2694953ada
- add NEWS entry in 0e836f523a
- Revert "Fix #77609: Tests from mailparse extension fails" in eb279fdb16
- NEWS in a99d49a3f5
- fix paste issue in f3bc383800
Sara Golemon
- Update CREDITS for PHP 7.2.17RC1 in 0a9769b03e
- 7.2.17 NEWS in d9c98d5c87
- Update versions for PHP 7.2.17 in 2132588c04
Stanislav Malyshev
- Fix bug #77396 - Null Pointer Dereference in phar_create_or_parse_filename in 7f0ab7c20c
- Fix integer overflows on 32-bits in 5e824a88d0
- Fix bug #77540 - Invalid Read on exif_process_SOFn in 5f0e62a3e5
- Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE in 8ac6fee856
- Fix test error message in 44f87fbf36
- Update NEWS in 759e841b24
- Fix bug #77586 -
phar_tar_writeheaders_int()
buffer overflow in e0f5d62bd6 - Fix bug #77630 - safer
rename()
procedure in e3133e4db7 - Fix bug #77753 - Heap-buffer-overflow in php_ifd_get32s in 1c0d06441a
- Fixed bug #77831 - Heap-buffer-overflow in exif_iif_add_value in EXIF in 330f1716df
twosee
- Don't disable object slot reuse while running shutdown functions in bd6eabd659
Vlad Temian
- Fixed bug #77765 in fe2885d80a
Xinchen Hui
- Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper) in 4a72dd782d
- Fixed bug #77660 (Segmentation fault on break 2147483648) in 1c22ace058
- Fixed bug #77738 (Nullptr deref in
zend_compile_expr
) in c7920aba3e - Simplfy test case in e072537e7f