PHP 7.2 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.2.26 is not recommended. PHP 7.2.34 is the latest version in the series.
Downloads
Source Code
Git Clone
Use Git to clone the 7.2.26 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.2.26
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-7.2.26-x64NTS.zip (24.9 MiB)
php-7.2.26-x86NTS.zip (23.26 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-7.2.26-x64TS.zip (25.03 MiB)
php-7.2.26-x86TS.zip (23.34 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.26-cli-alpine
Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.2.26-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.26-fpm-alpine
Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.2.26-apache
Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.2.26-fpm
ChangeLog
Bcmath
- Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
Core
- Fixed bug #78862 (
link()
silently truncates after a null byte on Windows). (CVE-2019-11044). - Fixed bug #78863 (DirectoryIterator class silently truncates after a null byte). (CVE-2019-11045).
EXIF
- Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer). (CVE-2019-11050).
- Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
GD
- Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW).
Intl
- Fixed bug #78804 (Segmentation fault in
Locale::filterMatches
).
OPcache
- Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
Standard
Commit List
Christoph M. Becker
- Update NEWS in f6eac76b65
- Fix #78849: GD build broken with -D SIGNED_COMPARE_SLOW in 9b92c1d154
- Fix #78833: Integer overflow in pack causes out-of-bound access in db420cb6a1
- Fix #78814: strip_tags allows / in tag name => whitelist bypass in 600f1f898f
- Fix #78863: DirectoryIterator class silently truncates after a null byte in d74907b857
- Fix #78862:
link()
silently truncates after a null byte on Windows in 2517a7e213 - Fix #78878: Buffer underflow in bc_shift_addsub in 2d07f00b73
George Wang
- Added environment LSAPI_CLEAN_SHUTDOWN to control clean shutdown. Update SAPI version to LiteSpeed v7.6 in c7141412ce
Nikita Popov
- Fixed bug #78759 in 5fa6dcd972
- Remove outdated comments in test in ee243bc471
Remi Collet
- Update CREDITS for PHP 7.2.26RC1 in e8364d352c
- prepare NEWS in 57dfaa9749
- Update versions for PHP 7.2.26 in 1df155af14
Sara Golemon
- Bump for 7.2.26-dev in d317e16e89
Stanislav Malyshev
- Fix bug #78804 - Segmentation fault in
Locale::filterMatches
in 2c9926f156 - Fix test in 8877854ef2
- Fixed bug #78910 in 57325460d2
- Fix bug #78793 in 1b3b4a0d36
- Fix test in c88d95839f
Tyson Andre
- Fix $x = (bool)$x; for undefined with opcache in a2c41c0ea6