PHP Release 7.3.15


    PHP 7.3.15 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.3.15. This is a security release which also contains several bug fixes.

    All PHP 7.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.3.15 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.3.15 (tar.bz2)
    SHA256: 8dbe1507ea0035f4211faa0db80fe95f39df0e39d8408223820fe9123487043d
    PHP 7.3.15 (tar.gz)
    SHA256: c606dd09de2edff1e6b6c5b9f0076214a59f6f1a3272e15d681ed16257737ef6
    PHP 7.3.15 (tar.xz)
    SHA256: de7ae7cf3d1dbb2824975b26b32991dac2b732886ec22075b8c53b261b018166
    Change Logs
    core
    • Fixed bug #71876 (Memory corruption htmlspecialchars(): charset `*' not supported).
    • Fixed bug #79146 (cscript can fail to run on some systems).
    • Fixed bug #78323 (Code 0 is returned on invalid options).
    • Fixed bug #76047 (Use-after-free when accessing already destructed backtrace arguments).
    curl
    • Fixed bug #79078 (Hypothetical use-after-free in curl_multi_add_handle()).
    intl
    • Fixed bug #79212 (NumberFormatter::format() may detect wrong type).
    libxml
    • Fixed bug #79191 (Error in SoapClient ctor disables DOMDocument::save()).
    mbstring
    • Fixed bug #79154 (mb_convert_encoding() can modify $from_encoding).
    mysqlnd
    • Fixed bug #79084 (mysqlnd may fetch wrong column indexes with MYSQLI_BOTH).
    openssl
    • Fixed bug #79145 (openssl memory leak).
    phar
    • Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have all-access permissions). (CVE-2020-7063)
    • Fixed bug #79171 (heap-buffer-overflow in phar_extract_file). (CVE-2020-7061)
    • Fixed bug #76584 (PharFileInfo::decompress not working).
    reflection
    • Fixed bug #79115 (ReflectionClass::isCloneable call reflected class __destruct).
    session
    • Fixed bug #79221 (Null Pointer Dereference in PHP Session Upload Progress). (CVE-2020-7062)
    spl
    • Fixed bug #79151 (heap use after free caused by spl_dllist_it_helper_move_forward).
    standard
    • Fixed bug #78902 (Memory leak when using stream_filter_append).
    testing
    • Fixed bug #78090 (bug45161.phpt takes forever to finish).
    xsl
    • Fixed bug #70078 (XSL callbacks with nodes as parameter leak memory).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top