PHP Release 7.2.27


    PHP 7.2.27 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.2.27. This is a security release.

    All PHP 7.2 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.2.27 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.2.27 (tar.bz2)
    SHA256: 5bc0695b171b870ceb083c5432c6a758d3dbd3830a0cf6cf35bd9b283a627049
    PHP 7.2.27 (tar.gz)
    SHA256: e00ace5e89cb162cba0aebd17144541e1c4d965589155a44ca706d9f9c5a8981
    PHP 7.2.27 (tar.xz)
    SHA256: 7bd0fb9e3b63cfe53176d1f3565cd686f90b3926217158de5ba57091f49e4c32
    Change Logs
    mbstring
    • Fixed bug #79037 (global buffer-overflow in `mbfl_filt_conv_big5_wchar`). (CVE-2020-7060)
    session
    • Fixed bug #79091 (heap use-after-free in session_create_id()).
    standard
    • Fixed bug #79099 (OOB read in php_strip_tags_ex). (CVE-2020-7059).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top