PHP Release 7.4.18


    PHP 7.4.18 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.4.18. This is a security release.

    All PHP 7.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.4.18 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.4.18 (tar.gz)
    SHA256: 31a8a4a6e7d641f014749cef21421a6d1c9aaba6dce884e181a3370a8e69a04d
    PHP 7.4.18 (tar.bz2)
    SHA256: 2e455932e9c6f5889b1dc879f36fdd5744eaf1ff572b1b778958cbb8f5c1842f
    PHP 7.4.18 (tar.xz)
    SHA256: ab97f22b128d21dcbc009b50a37aaea0051b2721cbcd122d9e00e6ffc3c4b7e1
    Change Logs
    core
    • Fixed bug #80781 (Error handler that throws ErrorException infinite loop).
    • Fixed bug #75776 (Flushing streams with compression filter is broken).
    • Fixed #80706 (mail(): Headers after Bcc headers may be ignored).
    dba
    • Fixed bug #80817 (dba_popen() may cause segfault during RSHUTDOWN).
    dom
    • Fixed bug #66783 (UAF when appending DOMDocument to element).
    fpm
    • Fixed bug #80024 (Duplication of info about inherited socket after pool removing).
    ftp
    • Fixed bug #80880 (SSL_read on shutdown, ftp/proc_open).
    imap
    • Fixed bug #80710 (imap_mail_compose() header injection).
    intl
    • Fixed bug #80763 (msgfmt_format() does not accept DateTime references).
    libxml
    • Fixed bug #51903 (simplexml_load_file() doesn't use HTTP headers).
    • Fixed bug #73533 (Invalid memory access in php_libxml_xmlCheckUTF8).
    mysqlnd
    • Fixed bug #80713 (SegFault when disabling ATTR_EMULATE_PREPARES and MySQL 8.0).
    • Fixed bug #80837 (Calling stmt_store_result after fetch doesn't throw an error).
    • Fixed bug #78680 (mysqlnd's mysql_clear_password does not transmit null-terminated password).
    opcache
    • Fixed bug #80805 (create simple class and get error in opcache.so).
    • Fixed bug #80950 (Variables become null in if statements).
    • Fixed bug #80682 (opcache doesn't honour pcre.jit option).
    pcntl
    • Fixed bug #79812 (Potential integer overflow in pcntl_exec()).
    pcre
    • Fixed bug #80866 (preg_split ignores limit flag when pattern with \K has 0-width fullstring match).
    pdo_odbc
    • Fixed bug #80783 (PDO ODBC truncates BLOB records at every 256th byte).
    pdo_pgsql
    • Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR).
    phpdbg
    • Fixed bug #80757 (Exit code is 0 when could not open file).
    session
    • Fixed bug #80774 (session_name() problem with backslash).
    • Fixed bug #80889 (Cannot set save handler when save_handler is invalid).
    soap
    • Fixed bug #69668 (SOAP special XML characters in namespace URIs not encoded).
    standard
    • Fixed bug #78719 (http wrapper silently ignores long Location headers).
    • Fixed bug #80771 (phpinfo(INFO_CREDITS) displays nothing in CLI).
    • Fixed bug #80838 (HTTP wrapper waits for HTTP 1 response after HTTP 101).
    • Fixed bug #80915 (Taking a reference to $_SERVER hides its values from phpinfo()).
    • Fixed bug #80654 (file_get_contents() maxlen fails above (2**31)-1 bytes).
    mysqli
    • Fixed bug #74779 (x() and y() truncating floats to integers).
    openssl
    • Fixed bug #80747 (Providing RSA key size < 512 generates key that crash PHP).
    phar
    • Fixed bug #75850 (Unclear error message wrt. __halt_compiler() w/o semicolon)
    • Fixed bug #70091 (Phar does not mark UTF-8 filenames in ZIP archives).
    • Fixed bug #53467 (Phar cannot compress large archives).
    spl
    • Fixed bug#80719 (Iterating after failed ArrayObject::setIteratorClass() causes Segmentation fault).
    zip
    • Fixed bug #80648 (Fix for bug 79296 should be based on runtime version).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top