PHP Release 7.2.17


    PHP 7.2.17 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.2.17. This is a security release which also contains several minor bug fixes.

    All PHP 7.2 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.2.17 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.2.17 (tar.bz2)
    SHA256: 91a811ab6f6d7acb312159cf6b0a3cffe968676fdebf042e9253245cc6094f75
    PHP 7.2.17 (tar.gz)
    SHA256: e1c6c2553cdb7edbfa65b89e259690ed01b31b12d57349c90b6ed00a410f62b5
    PHP 7.2.17 (tar.xz)
    SHA256: a3e5f51a9ae08813b3925bea3a4de02cd4906fcccf75646e267a213bb63bcf84
    Change Logs
    core
    • Fixed bug #77738 (Nullptr deref in zend_compile_expr).
    • Fixed bug #77660 (Segmentation fault on break 2147483648).
    • Fixed bug #77652 (Anonymous classes can lose their interface information).
    • Fixed bug #77676 (Unable to run tests when building shared extension on AIX).
    bcmath
    • Fixed bug #77742 (bcpow() implementation related to gcc compiler optimization).
    com
    • Fixed bug #77578 (Crash when php unload).
    date
    • Fixed bug #50020 (DateInterval:createDateFromString() silently fails).
    • Fixed bug #75113 (Added DatePeriod::getRecurrences() method).
    exif
    • Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
    • Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). (CVE-2019-11035)
    fpm
    • Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
    gd
    • Fixed bug #77700 (Writing truecolor images as GIF ignores interlace flag).
    mysqli
    • Fixed bug #77597 (mysqli_fetch_field hangs scripts).
    opcache
    • Fixed bug #77691 (Opcache passes wrong value for inline array push assignments).
    • Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical successors).
    phpdbg
    • Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match actual aliases).
    sodium
    • Fixed bug #77646 (sign_detached() strings not terminated).
    sqlite3
    • Added sqlite3.defensive INI directive.
    standard
    • Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper).
    • Fixed bug #77669 (Crash in extract() when overwriting extracted array).
    • Fixed bug #76717 (var_export() does not create a parsable value for PHP_INT_MIN).
    • Fixed bug #77765 (FTP stream wrapper should set the directory as executable).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top