PHP Release 7.2.26


    PHP 7.2.26 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.2.26. This is a security release which also contains several minor bug fixes.

    All PHP 7.2 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.2.26 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.2.26 (tar.bz2)
    SHA256: f36d86eecf57ff919d6f67b064e1f41993f62e3991ea4796038d8d99c74e847b
    PHP 7.2.26 (tar.gz)
    SHA256: e97d0636478bb519cd955a0c17b7970cf173063a840a83fc4afb75c22bc1bf08
    PHP 7.2.26 (tar.xz)
    SHA256: 1dd3bc875e105f5c9d21fb4dc240670bd2c22037820ff03890f5ab883c88b78d
    Change Logs
    bcmath
    • Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
    core
    • Fixed bug #78862 (link() silently truncates after a null byte on Windows). (CVE-2019-11044).
    • Fixed bug #78863 (DirectoryIterator class silently truncates after a null byte). (CVE-2019-11045).
    exif
    • Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer). (CVE-2019-11050).
    • Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
    gd
    • Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW).
    intl
    • Fixed bug #78804 (Segmentation fault in Locale::filterMatches).
    opcache
    • Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
    standard
    • Fixed bug #78759 (array_search in $GLOBALS).
    • Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
    • Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top