PHP 7.2 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.2.27 is not recommended. PHP 7.2.34 is the latest version in the series.
Downloads
Source Code
Git Clone
Use Git to clone the 7.2.27 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.2.27
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-7.2.27-x64NTS.zip (24.9 MiB)
php-7.2.27-x86NTS.zip (23.27 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-7.2.27-x64TS.zip (25.04 MiB)
php-7.2.27-x86TS.zip (23.34 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.27-cli-alpine
Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.2.27-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.2.27-fpm-alpine
Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.2.27-apache
Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.2.27-fpm
ChangeLog
Mbstring
- Fixed bug #79037 (global buffer-overflow in
mbfl_filt_conv_big5_wchar
). (CVE-2020-7060)
Session
- Fixed bug #79091 (heap use-after-free in
session_create_id()
).
Standard
- Fixed bug #79099 (OOB read in
php_strip_tags_ex
). (CVE-2020-7059).
Commit List
Christoph M. Becker
- Fix #78863: DirectoryIterator class silently truncates after a null byte in a5a15965da
- Fix #78862:
link()
silently truncates after a null byte on Windows in 0e6c0654ed - Fix #78878: Buffer underflow in bc_shift_addsub in eb23c60087
- Fix #79091: heap use-after-free in
session_create_id()
in f79c774274
Remi Collet
- next is 7.2.27 in d2cfb63f02
- fix release date in 864f5ef12f
- Update CREDITS for PHP 7.2.27 in 525e494fe5
- Update versions for PHP 7.2.27 in 40c86aa3af
Stanislav Malyshev
- Fix test in b771a18133
- Fixed bug #78910 in d348cfb96f
- Fix bug #78793 in c14eb8de97
- Fix test in 6d5cddabaf
- Fix #79099: OOB read in
php_strip_tags_ex
in 0f79b1bf30 - Fix bug #79037 (global buffer-overflow in
mbfl_filt_conv_big5_wchar
) in 2bcbc95f03 - Update NEWS in 5c90f8eb66