PHP Release 7.2.34

    PHP 7.2.34 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.2.34. This is a security release.

    All PHP 7.2 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.2.34 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.2.34 (tar.gz)
    SHA256: 8b2777c741e83f188d3ca6d8e98ece7264acafee86787298fae57e05d0dddc78
    PHP 7.2.34 (tar.bz2)
    SHA256: 0e5816d668a2bb14aca68cef8c430430bd86c3c5233f6c427d1a54aac127abcf
    PHP 7.2.34 (tar.xz)
    SHA256: 409e11bc6a2c18707dfc44bc61c820ddfd81e17481470f3405ee7822d8379903
    Change Logs
    core
    • Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (CVE-2020-7070)
    openssl
    • Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV). (CVE-2020-7069)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top