PHP Release 7.4.21


    PHP 7.4.21 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.4.21. This is a security release.

    All PHP 7.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.4.21 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.4.21 (tar.gz)
    SHA256: 4b9623accbe4b8923a801212f371f784069535009185e7bf7e4dec66bbea61db
    PHP 7.4.21 (tar.bz2)
    SHA256: 36ec6102e757e2c2b7742057a700bbff77c76fa0ccbe9c860398c3d24e32822a
    PHP 7.4.21 (tar.xz)
    SHA256: cf43384a7806241bc2ff22022619baa4abb9710f12ec1656d0173de992e32a90
    Change Logs
    core
    • Fixed bug #76359 (open_basedir bypass through adding "..").
    • Fixed bug #81068 (Double free in realpath_cache_clean()).
    • Fixed bug #81070 (Integer underflow in memory limit comparison).
    • Fixed bug #81090 (Typed property performance degradation with .= operator).
    • Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705)
    bzip2
    • Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
    openssl
    • Fixed bug #76694 (native Windows cert verification uses CN as sever name).
    pdo_firebird
    • Fixed bug #76448: Stack buffer overflow in firebird_info_cb. (CVE-2021-21704)
    • Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704)
    • Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704)
    • Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob. (CVE-2021-21704)
    standard
    • Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top