PHP Release 7.3.14


    PHP 7.3.14 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.3.14. This is a security release which also contains several bug fixes.

    All PHP 7.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.3.14 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.3.14 (tar.bz2)
    SHA256: b9dfcbbbc929ce67995f976de8636c5f46804593ecae6e110509329b9dc6c272
    PHP 7.3.14 (tar.gz)
    SHA256: 6aff532a380b0f30c9e295b67dc91d023fee3b0ae14b4771468bf5dda4cbf108
    PHP 7.3.14 (tar.xz)
    SHA256: cc05dd373ca5d36652800762f65c10e828a17de35aaf246262e3efa99d00cdb0
    Change Logs
    curl
    • Fixed bug #78999 (Cycle leak when using function result as temporary).
    • Fixed bug #79033 (Curl timeout error with specific url and post).
    date
    • Fixed bug #79015 (undefined-behavior in php_date.c).
    dba
    • Fixed bug #78808 ([LMDB] MDB_MAP_FULL: Environment mapsize limit reached).
    fileinfo
    • Fixed bug #74170 (locale information change after mime_content_type).
    gd
    • Fixed bug #78923 (Artifacts when convoluting image with transparency).
    • Fixed bug #79067 (gdTransformAffineCopy() may use unitialized values).
    • Fixed bug #79068 (gdTransformAffineCopy() changes interpolation method).
    libxml
    • Fixed bug #79029 (Use After Free's in XMLReader / XMLWriter).
    mbstring
    • Fixed bug #79037 (global buffer-overflow in `mbfl_filt_conv_big5_wchar`). (CVE-2020-7060)
    opcache
    • Fixed bug #79040 (Warning Opcode handlers are unusable due to ASLR).
    pcntl
    • Fixed bug #78402 (Converting null to string in error message is bad DX).
    pdo_pgsql
    • Fixed bug #78983 (pdo_pgsql config.w32 cannot find libpq-fe.h).
    • Fixed bug #78980 (pgsqlGetNotify() overlooks dead connection).
    • Fixed bug #78982 (pdo_pgsql returns dead persistent connection).
    session
    • Fixed bug #79091 (heap use-after-free in session_create_id()).
    shmop
    • Fixed bug #78538 (shmop memory leak).
    standard
    • Fixed bug #79099 (OOB read in php_strip_tags_ex). (CVE-2020-7059).
    • Fixed bug #54298 (Using empty additional_headers adding extraneous CRLF).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top