PHP 7.4.4: Downloads, Changelog, News

Release Information

Release
7.4.4
PHP Version
PHP 7.4
Release Date
Release Type
Security Update
Release Status
EOL, Use PHP 7.4.33
Branch Status
Unsupported

PHP 7.4 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.4.4 is not recommended. PHP 7.4.33 is the latest version in the series.

Downloads

Source Code

Git Clone
Use Git to clone the 7.4.4 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.4.4
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.4.4-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.4.4-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.4.4-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.4.4-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.4.4-fpm

ChangeLog

Core

  • Fixed bug #79244 (php crashes during parsing INI file).
  • Fixed bug #63206 (restore_error_handler does not restore previous errors mask).

COM

  • Fixed bug #66322 (COMPersistHelper::SaveToFile can save to wrong location).
  • Fixed bug #79242 (COM error constants don't match com_exception codes on x86).
  • Fixed bug #79247 (Garbage collecting variant objects segfaults).
  • Fixed bug #79248 (Traversing empty VT_ARRAY throws com_exception).
  • Fixed bug #79299 (com_print_typeinfo prints duplicate variables).
  • Fixed bug #79332 (php_istreams are never freed).
  • Fixed bug #79333 (com_print_typeinfo() leaks memory).

CURL

  • Fixed bug #79019 (Copied cURL handles upload empty file).
  • Fixed bug #79013 (Content-Length missing when posting a curlFile with curl).

DOM

  • Fixed bug #77569: (Write Access Violation in DomImplementation).
  • Fixed bug #79271 (DOMDocumentType::$childNodes is NULL).

Enchant

  • Fixed bug #79311 (enchant_dict_suggest() fails on big endian architecture).

EXIF

Fileinfo

  • Fixed bug #79283 (Segfault in libmagic patch contains a buffer overflow).

FPM

  • Fixed bug #77653 (operator displayed instead of the real error message).
  • Fixed bug #79014 (PHP-FPM & Primary script unknown).

MBstring

  • Fixed bug #79371 (mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full). (CVE-2020-7065)

MySQLi

  • Fixed bug #64032 (mysqli reports different client_version).

MySQLnd

  • Implemented FR #79275 (Support auth_plugin_caching_sha2_password on Windows).

Opcache

  • Fixed bug #79252 (preloading causes php-fpm to segfault during exit).

PCRE

  • Fixed bug #79188 (Memory corruption in preg_replace/preg_replace_callback and unicode).
  • Fixed bug #79241 (Segmentation fault on preg_match()).
  • Fixed bug #79257 (Duplicate named groups (?J) prefer last alternative even if not matched).

PDO_ODBC

  • Fixed bug #79038 (PDOStatement::nextRowset() leaks column values).

Reflection

  • Fixed bug #79062 (Property with heredoc default value returns false for getDocComment).

SQLite3

  • Fixed bug #79294 (::columnType() may fail after SQLite3Stmt::reset()).

Standard

  • Fixed bug #79329 (get_headers() silently truncates after a null byte). (CVE-2020-7066)
  • Fixed bug #79254 (getenv() w/o arguments not showing changes).
  • Fixed bug #79265 (Improper injection of Host header when using fopen for http requests).

Zip

  • Fixed bug #79315 (ZipArchive::addFile doesn't honor start/length parameters).

Commit List

Anatol Belski

Christoph M. Becker

Derick Rethans

Dmitry Stogov

  • Make opcodes to return de-refereced values of typed references (in the same was as for non-typed) in 5d0ef4c239
  • Disable instantiation of zero size FFI\CData objects in 54ecf57fe2
  • Fixed incorrect behavior of internal memory debugger in 45b4368d5c
  • Fixed incorrect overflow detection in 5b51b633e2

Jakub Zelenka

jsmmo

  • Remove hint to security purpose of disable_functions in 038ca4bb07

Mark Plomer

  • Fix #63206: Fully support error/exception_handler stacking, even with null or inside the handler in 8c6a7c3326

Michael Voříšek

  • Remove value from comment in php.ini files in 61e76927b4

Miguel Xavier Penha Neto

  • Fixes #79265: Improper injection of Host header when using fopen for http requests in d0d60503b5

Nikita Popov

Remi Collet

Stanislav Malyshev

  • Fix bug #79221 - Null Pointer Dereference in PHP Session Upload Progress in d76f7c6c63
  • Fix bug #79082 - Files added to tar with Phar::buildFromIterator have all-access permissions in e5c95234d8
  • Fix bug #79221 - Null Pointer Dereference in PHP Session Upload Progress in 409965fe1c
  • Fix bug #79082 - Files added to tar with Phar::buildFromIterator have all-access permissions in 6facfa59a5
  • Fix bug #79221 - Null Pointer Dereference in PHP Session Upload Progress in 282bfb109e
  • Fix bug #79082 - Files added to tar with Phar::buildFromIterator have all-access permissions in bbcb8cab8c
  • Fixed bug #79282 in 0c77b4307d
  • Fix bug #79329 - get_headers should not accept \0 in a33d05b147
  • Fix test in 919e91f841

Xinchen Hui

  • Fixed bug #79244 (php crashes during parsing INI file). (Laruence) in 6295ff77b7
Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.