PHP Release 7.4.9


    PHP 7.4.8 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.4.9. This is a security release.

    All PHP 7.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.4.9 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.4.9 (tar.bz2)
    SHA256: 2e270958a4216480da7886743438ccc92b6acf32ea96fefda88d07e0a5095deb
    PHP 7.4.9 (tar.gz)
    SHA256: c0c657b5769bc463f5f028b1f4fef8814d98ecf3459a402a9e30d41d68b2323e
    PHP 7.4.9 (tar.xz)
    SHA256: 23733f4a608ad1bebdcecf0138ebc5fd57cf20d6e0915f98a9444c3f747dc57b
    Change Logs
    apache
    • Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_request_time to return usec).
    com
    • Fixed bug #63208 (BSTR to PHP string conversion not binary safe).
    • Fixed bug #63527 (DCOM does not work with Username, Password parameter).
    core
    • Fixed bug #79877 (getimagesize function silently truncates after a null byte)
    • Fixed bug #79740 (serialize() and unserialize() methods can not be called statically).
    • Fixed bug #79783 (Segfault in php_str_replace_common).
    • Fixed bug #79778 (Assertion failure if dumping closure with unresolved static variable).
    • Fixed bug #79779 (Assertion failure when assigning property of string offset by reference).
    • Fixed bug #79792 (HT iterators not removed if empty array is destroyed).
    • Fixed bug #78598 (Changing array during undef index RW error segfaults).
    • Fixed bug #79784 (Use after free if changing array during undef var during array write fetch).
    • Fixed bug #79793 (Use after free if string used in undefined index warning is changed).
    • Fixed bug #79862 (Public non-static property in child should take priority over private static).
    fileinfo
    • Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)).
    ftp
    • Fixed bug #55857 (ftp_size on large files).
    mbstring
    • Fixed bug #79787 (mb_strimwidth does not trim string).
    openssl
    • Fixed bug #79881 (Memory leak in openssl_pkey_get_public()).
    phar
    • Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile function). (CVE-2020-7068)
    reflection
    • Fixed bug #79487 (::getStaticProperties() ignores property modifications).
    • Fixed bug #69804 (::getStaticPropertyValue() throws on protected props).
    • Fixed bug #79820 (Use after free when type duplicated into ReflectionProperty gets resolved).
    standard
    • Fixed bug #70362 (Can't copy() large 'data://' with open_basedir).
    • Fixed bug #78008 (dns_check_record() always return true on Alpine).
    • Fixed bug #79839 (array_walk() does not respect property types).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top