PHP Release 7.4.14


PHP 7.4.14 Release Announcement

The PHP development team announces the immediate availability of PHP 7.4.14. This is a security release.

All PHP 7.4 users are encouraged to upgrade to this version.

For source downloads of PHP 7.4.14 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 7.4.14 (tar.gz)
SHA256: d359183e2436f4ab30b70d4fbd881b5705a46b2e68cc6069fe91cd63d6e98e13
PHP 7.4.14 (tar.bz2)
SHA256: 6889ca0605adee3aa7077508cd79fcef1dbd88461cdf25e7c1a86997b8d0a1f6
PHP 7.4.14 (tar.xz)
SHA256: f9f3c37969fcd9006c1dbb1dd76ab53f28c698a1646fa2dde8547c3f45e02886
Change Logs
core
  • Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()).
  • Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION).
  • Fixed bug #72964 (White space not unfolded for CC/Bcc headers).
  • Fixed bug #80362 (Running dtrace scripts can cause php to crash).
  • Fixed bug #80393 (Build of PHP extension fails due to configuration gap with libtool).
  • Fixed bug #80402 (configure filtering out -lpthread).
  • Fixed bug #77069 (stream filter loses final block of data).
fileinfo
  • Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT).
fpm
  • Fixed bug #69625 (FPM returns 200 status on request without SCRIPT_FILENAME env).
intl
  • Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined).
openssl
  • Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to lack of OCB support).
phar
  • Fixed bug #73809 (Phar Zip parse crash - mmap fail).
  • Fixed bug #75102 (`PharData` says invalid checksum for valid tar).
  • Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow).
pdo mysql
  • Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries).
  • Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared statements).
  • Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands).
  • Fixed bug #70066 (Unexpected "Cannot execute queries while other unbuffered queries").
  • Fixed bug #71145 (Multiple statements in init command triggers unbuffered query error).
  • Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a PROCEDURE resultset SIGNAL).
standard
  • Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). (CVE-2020-7071)
  • Fixed bug #80366 (Return Value of zend_fstat() not Checked).
  • Fixed bug #80411 (References to null-serialized object break serialize()).
tidy
  • Fixed bug #77594 (ob_tidyhandler is never reset).
zlib
  • Fixed #48725 (Support for flushing in zlib stream).
To Top