PHP Release 7.4.11


    PHP 7.4.11 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.4.11. This is a security release.

    All PHP 7.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.4.11 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.4.11 (tar.bz2)
    SHA256: 5408f255243bd2292f3fbc2fafc27a2ec083fcd852902728f2ba9a3ea616b8c5
    PHP 7.4.11 (tar.gz)
    SHA256: b4fae5c39ca1eedf5597071996d9c85d0674b83f5003126c39b7b44bbfbcd821
    PHP 7.4.11 (tar.xz)
    SHA256: 5d31675a9b9c21b5bd03389418218c30b26558246870caba8eb54f5856e2d6ce
    Change Logs
    core
    • Fixed bug #79979 (passing value to by-ref param via CUFA crashes).
    • Fixed bug #80037 (Typed property must not be accessed before initialization when __get() declared).
    • Fixed bug #80048 (Bug #69100 has not been fixed for Windows).
    • Fixed bug #80049 (Memleak when coercing integers to string via variadic argument).
    • Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (CVE-2020-7070)
    calendar
    • Fixed bug #80007 (Potential type confusion in unixtojd() parameter parsing).
    com
    • Fixed bug #64130 (COM obj parameters passed by reference are not updated).
    opcache
    • Fixed bug #80002 (calc free space for new interned string is wrong).
    • Fixed bug #80046 (FREE for SWITCH_STRING optimized away).
    • Fixed bug #79825 (opcache.file_cache causes SIGSEGV when custom opcode handlers changed).
    openssl
    • Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV). (CVE-2020-7069)
    pdo
    • Fixed bug #80027 (Terrible performance using $query->fetch on queries with many bind parameters).
    soap
    • Fixed bug #47021 (SoapClient stumbles over WSDL delivered with "Transfer-Encoding: chunked").
    standard
    • Fixed bug #79986 (str_ireplace bug with diacritics characters).
    • Fixed bug #80077 (getmxrr test bug).
    • Fixed bug #72941 (Modifying bucket->data by-ref has no effect any longer).
    • Fixed bug #80067 (Omitting the port in bindto setting errors).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top