PHP Release 7.2.8


    PHP 7.2.8 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.2.8. This is a security release which also contains several minor bug fixes.

    All PHP 7.2 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.2.8 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.2.8 (tar.bz2)
    SHA256: 1f8068f520a60fff3db19be1b849f0c02a33a0fd8b34b7ae05556ef682187ee6
    PHP 7.2.8 (tar.gz)
    SHA256: a0cb9bf2f78498fc090eb553df03cdacc198785dec0818efa7a1804c2b7a8722
    PHP 7.2.8 (tar.xz)
    SHA256: 53ba0708be8a7db44256e3ae9fcecc91b811e5b5119e6080c951ffe7910ffb0f
    Change Logs
    core
    • Fixed bug #76534 (PHP hangs on 'illegal string offset on string references with an error handler).
    • Fixed bug #76520 (Object creation leaks memory when executed over HTTP).
    • Fixed bug #76502 (Chain of mixed exceptions and errors does not serialize properly).
    date
    • Fixed bug #76462 (Undefined property: DateInterval::$f).
    exif
    • Fixed bug #76409 (heap use after free in _php_stream_free).
    • Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c).
    • Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data).
    fpm
    • Fixed bug #73342 (Vulnerability in php-fpm by changing stdin to non-blocking).
    gmp
    • Fixed bug #74670 (Integer Underflow when unserializing GMP and possible other classes).
    intl
    • Fixed bug #76556 (get_debug_info handler for BreakIterator shows wrong type).
    mbstring
    • Fixed bug #76532 (Integer overflow and excessive memory usage in mb_strimwidth).
    opcache
    • Fixed bug #76477 (Opcache causes empty return value).
    pgsql
    • Fixed bug #76548 (pg_fetch_result did not fetch the next row).
    phpdbg
    • Fix arginfo wrt. optional/required parameters.
    reflection
    • Fixed bug #76536 (PHP crashes with core dump when throwing exception in error handler).
    • Fixed bug #75231 (ReflectionProperty#getValue() incorrectly works with inherited classes).
    standard
    • Fixed bug #76505 (array_merge_recursive() is duplicating sub-array keys).
    • Fixed bug #71848 (getimagesize with $imageinfo returns false).
    win32
    • Fixed bug #76459 (windows linkinfo lacks openbasedir check).
    zip
    • Fixed bug #76461 (OPSYS_Z_CPM defined instead of OPSYS_CPM).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top