PHP 7.2 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.2.19 is not recommended. PHP 7.2.34 is the latest version in the series.
Downloads
Source Code
Git Clone
Use Git to clone the 7.2.19 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.2.19
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-7.2.19-x64NTS.zip (24.57 MiB)
php-7.2.19-x86NTS.zip (22.97 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-7.2.19-x64TS.zip (24.70 MiB)
php-7.2.19-x86TS.zip (23.04 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.19-cli-alpine
Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.2.19-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.19-fpm-alpine
Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.2.19-apache
Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.2.19-fpm
ChangeLog
Date
- Fixed bug #77909 (DatePeriod::__construct() with invalid recurrence count value).
EXIF
- Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040)
FPM
- Fixed bug #77934 (php-fpm kill -USR2 not working).
- Fixed bug #77921 (static.php.net doesn't work anymore).
GD
- Fixed bug #77943 (imageantialias($image, false); does not work).
- Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038)
Iconv
- Fixed bug #78069 (Out-of-bounds read in
iconv.c
:_php_iconv_mime_decode()
due to integer overflow). (CVE-2019-11039).
JSON
- Fixed bug #77843 (Use after free with json serializer).
Opcache
- Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset.
PDO_MySQL
- Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
Reflection
- Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
Session
- Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
SPL
- Fixed bug #77024 (SplFileObject::__toString() may return array).
SQLite
- Fixed bug #77967 (Bypassing
open_basedir
restrictions via file uris).
Commit List
Christoph M. Becker
- Fix tests for non English environments in 6fe75f9e45
- Fix #77911: Wrong warning for session.sid_bits_per_character in d20053a556
- Use php-sdk-2.2.0beta5 on AppVeyor in a7ada30ac6
- Fix #77938: socket_get_option error in fe202d99c8
- Fix #77940: test using outdated mon_thousands_sep for Swedish in 37ca6a7a2a
- Fix #77940: test using outdated mon_thousands_sep for Swedish in bfbfb9dabd
- Fix #77940: test using outdated mon_thousands_sep for Swedish in 7ddfe73e69
- Fix #77944: Wrong meta pdo_type for bigint on LLP64 in 16609880f8
- PHP, meet MySQL in 57d5dc5688
- Make
MySQLPDOTest::extractVersion()
more liberal in fc9cdb723b - Fix tests in 9bf11045db
- Add tests for bug77943 in 3891e0d13a
- Fix #77943: imageantialias($image, false); does not work in 18a9ae412f
- Fix #77821: Potential heap corruption in TSendMail() in 6c631ccfef
- Update NEWS wrt. sec fixes in 1210c3b960
- Add {TMP} placeholder for PHPT INI sections in 3d0a0f801b
- Fix
log_verbosity_bug.phpt
in e359812ce3 - Fix erroneous assertions in 27f168cf63
- Fix typo in 3759c6316d
- Fix test case in 704a0ab0c9
Craig Duncan
- Fix #77024: SplFileObject::__toString() may return array in 91c6fb881e
Dmitry Stogov
- Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset in 5c4d125d4c
George Wang
- Fixed bug in
litespeed_finish_request()
, disablefastcgi_finish_request()
alias for now in ccf051c317 - Improved LSAPI_End_Response_r() in ce73841cdc
- Updated LiteSpeed SAPI to 7.3.2 to allow request header value length up to 64K in af4143753f
Ignace Nyamagana Butera
- Fixed bug #77909: DatePeriod::__construct() with invalid recurrence count value in 7b1a4e2400
Jakub Zelenka
- Fix OpenSSL online test for ca context in 9977de0028
- Fix bug #77934 (php-fpm kill -USR2 not working) in cc5c51e7f0
- Add ping to the fpm test for bug #77934 in ad63bd169b
Nikita Popov
- Fixed bug #77843 in 4831e150c5
- Fixed bug #77945 in 5da0579259
- Fix resolution of "parent" during inheritance check in d19b6aa5ba
- Fixed bug #75186 in 35c80583f0
Peter Kokot
- Update Git repository for Windows build tool kit in 06fa35568e
- Fix #77921: static.php.net doesn't work anymore in 4450288344
- Update changelog in 295c66911f
- Update NEWS in 6d8892aacd
- Convert CRLF to LF in *.wsdl files in b15bfb9129
- Convert CRLF to LF in f95b27c6f6
Remi Collet
- next is 7.2.19 in 6c44a71e4a
- news entry for litespeed in 5d21a15cc3
- add NEWS entries for sec fix in abcd793ad5
- Update versions for PHP 7.2.19 in e845291527
Sara Golemon
- Update CREDITS for PHP 7.2.19RC1 in af575fd96c
- NEWS for 7.2.19 in 1b47faea37
Stanislav Malyshev
- Fix bug #77950 - Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG in f80ad18afa
- Fix function name in ef2d071ad1
Theodore Brown
- Fix #77993: Wrong parse error for invalid hex literal on Windows in b6b15fc65c