PHP version 7.2.14 (10 Jan 2019)

Core:

• Fixed bug #77369 (memcpy with negative length via crafted DNS response). (Stas)
• Fixed bug #71041 (zend_signal_startup() needs ZEND_API). (Valentin V. Bartenev)
• Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line). (Nikita)

Date:

• Fixed bug #77097 (DateTime::diff gives wrong diff when the actual diff is less than 1 second). (Derick)

Exif:

• Fixed bug #77184 (Unsigned rational numbers are written out as signed rationals). (Colin Basnett)

Opcache:

• Fixed bug #77215 (CFG assertion failure on multiple finalizing switch frees in one block). (Nikita)

PDO:

• Handle invalid index passed to PDOStatement::fetchColumn() as error. (Sergei Morozov)

Phar:

• Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext). (Stas)

Sockets:

• Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS). (Mizunashi Mana)

SQLite3:

• Fixed bug #77051 (Issue with re-binding on SQLite3). (BohwaZ)

Xmlrpc:

• Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()). (cmb)
• Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code). (Stas)