PHP Release 7.4.5


PHP 7.4.5 Release Announcement

The PHP development team announces the immediate availability of PHP 7.4.5. This is a security release which also contains several bug fixes.

All PHP 7.4 users are encouraged to upgrade to this version.

For source downloads of PHP 7.4.5 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 7.4.5 (tar.bz2)
SHA256: 39daa533d5b63c3394da711dc12867dd76c2ec31c940bbba16f14e577df13d6f
PHP 7.4.5 (tar.gz)
SHA256: 1ef619411b0bd68c0fbfd2a6c622ad6bc524d0bceb8476fb9807a23a0fe9a343
PHP 7.4.5 (tar.xz)
SHA256: d059fd7f55bdc4d2eada15a00a2976697010d3631ef6f83149cc5289e1f23c2c
Change Logs
core
  • Fixed bug #79364 (When copy empty array, next key is unspecified).
  • Fixed bug #78210 (Invalid pointer address).
curl
  • Fixed bug #79199 (curl_copy_handle() memory leak).
date
  • Fixed bug #79396 (DateTime hour incorrect during DST jump forward).
  • Fixed bug #74940 (DateTimeZone loose comparison always true).
fpm
  • Implement request #77062 (Allow numeric [UG]ID in FPM listen.{owner,group})
iconv
  • Fixed bug #79200 (Some iconv functions cut Windows-1258).
opcache
  • Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
session
  • Fixed bug #79413 (session_create_id() fails for active sessions).
shmop
  • Fixed bug #79427 (Integer Overflow in shmop_open()).
simplexml
  • Fixed bug #61597 (SXE properties may lack attributes and content).
soap
  • Fixed bug #79357 (SOAP request segfaults when any request parameter is missing).
spl
  • Fixed bug #75673 (SplStack::unserialize() behavior).
  • Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
standard
  • Fixed bug #79330 (shell_exec() silently truncates after a null byte).
  • Fixed bug #79465 (OOB Read in urldecode()). (CVE-2020-7067)
  • Fixed bug #79410 (system() swallows last chunk if it is exactly 4095 bytes without newline).
zip
  • Fixed Bug #79296 (ZipArchive::open fails on empty file).
  • Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).
To Top