Home » Releases » 7.4 » 7.4.33 »

PHP 7.4.4

PHP 7.4 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.4 is 7.4.33 which includes important security patches.

Source Code

  • PHP 7.4.4 (tar.bz2)

    • sha256: 308e8f4182ec8a2767b0b1b8e1e7c69fb149b37cfb98ee4a37475e082fa9829f
  • PHP 7.4.4 (tar.gz)

    • sha256: 1581b3e10c7854597e1086937d5753cdf92d132865c06a50aed4f4f407138616
  • PHP 7.4.4 (tar.xz)

    • sha256: 1873c4cefdd3df9a78dcffb2198bba5c2f0464f55c9c960720c84df483fca74c

Change Log

  • core

    • Fixed bug #79244 (php crashes during parsing INI file).
      Laruence
    • Fixed bug #63206 (restore_error_handler does not restore previous errors mask).
      Mark Plomer
  • com

    • Fixed bug #66322 (COMPersistHelper::SaveToFile can save to wrong location).
      cmb
    • Fixed bug #79242 (COM error constants don't match com_exception codes on x86).
      cmb
    • Fixed bug #79247 (Garbage collecting variant objects segfaults).
      cmb
    • Fixed bug #79248 (Traversing empty VT_ARRAY throws com_exception).
      cmb
    • Fixed bug #79299 (com_print_typeinfo prints duplicate variables).
      Litiano Moura
    • Fixed bug #79332 (php_istreams are never freed).
      cmb
    • Fixed bug #79333 (com_print_typeinfo() leaks memory).
      cmb
  • curl

    • Fixed bug #79019 (Copied cURL handles upload empty file).
      cmb
    • Fixed bug #79013 (Content-Length missing when posting a curlFile with curl).
      cmb
  • dom

    • Fixed bug #77569: (Write Access Violation in DomImplementation).
      Nikita
      cmb
    • Fixed bug #79271 (DOMDocumentType::$childNodes is NULL).
      cmb
  • enchant

    • Fixed bug #79311 (enchant_dict_suggest() fails on big endian architecture).
      cmb
  • exif

    • Fixed bug #79282 (Use-of-uninitialized-value in exif). (CVE-2020-7064)
      Nikita
  • fileinfo

    • Fixed bug #79283 (Segfault in libmagic patch contains a buffer overflow).
      cmb
  • fpm

    • Fixed bug #77653 (operator displayed instead of the real error message).
      Jakub Zelenka
    • Fixed bug #79014 (PHP-FPM & Primary script unknown).
      Jakub Zelenka
  • mbstring

    • Fixed bug #79371 (mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full). (CVE-2020-7065)
      cmb
  • mysqli

    • Fixed bug #64032 (mysqli reports different client_version).
      cmb
  • mysqlnd

    • Implemented FR #79275 (Support auth_plugin_caching_sha2_password on Windows).
      cmb
  • opcache

    • Fixed bug #79252 (preloading causes php-fpm to segfault during exit).
      Nikita
  • pcre

    • Fixed bug #79188 (Memory corruption in preg_replace/preg_replace_callback and unicode).
      Nikita
    • Fixed bug #79241 (Segmentation fault on preg_match()).
      Nikita
    • Fixed bug #79257 (Duplicate named groups (?J) prefer last alternative even if not matched).
      Nikita
  • pdo_odbc

    • Fixed bug #79038 (PDOStatement::nextRowset() leaks column values).
      cmb
  • reflection

    • Fixed bug #79062 (Property with heredoc default value returns false for getDocComment).
      Nikita
  • sqlite3

    • Fixed bug #79294 (::columnType() may fail after SQLite3Stmt::reset()).
      cmb
  • standard

    • Fixed bug #79329 (get_headers() silently truncates after a null byte). (CVE-2020-7066)
      cmb
    • Fixed bug #79254 (getenv() w/o arguments not showing changes).
      cmb
    • Fixed bug #79265 (Improper injection of Host header when using fopen for http requests).
      Miguel Xavier Penha Neto
  • zip

    • Fixed bug #79315 (ZipArchive::addFile doesn't honor start/length parameters).
      Remi

PHP 7.4


  Represents a security release