PHP Release 7.4.33

PHP 7.4.33 Release Announcement

The PHP development team announces the immediate availability of PHP 7.4.33.

This is security release that fixes an OOB read due to insufficient input validation in imageloadfont(), and a buffer overflow in hash_update() on long parameter.

All PHP 7.4 users are encouraged to upgrade to this version.

For source downloads of PHP 7.4.33 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 7.4.33 (tar.gz)
SHA256: 5a2337996f07c8a097e03d46263b5c98d2c8e355227756351421003bea8f463e
PHP 7.4.33 (tar.bz2)
SHA256: 4e8117458fe5a475bf203128726b71bcbba61c42ad463dffadee5667a198a98a
PHP 7.4.33 (tar.xz)
SHA256: 924846abf93bc613815c55dd3f5809377813ac62a9ec4eb3778675b82a27b927
Change Logs
gd
  • Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
hash
  • Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
To Top