PHP Release 7.3.16


    PHP 7.3.16 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.3.16. This is a security release which also contains several bug fixes.

    All PHP 7.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.3.16 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.3.16 (tar.bz2)
    SHA256: b8072d526a283182963b03960b7982392daa43cb31131eca4cf0b996764a042e
    PHP 7.3.16 (tar.gz)
    SHA256: a01ae4f6baf427413c28f8cfddbae86aeff61cdb88658e75404f2d93d98e3255
    PHP 7.3.16 (tar.xz)
    SHA256: 91aaee3dbdc71b69b4f3292f9d99211172a2fa926c3f3bbdb0e85dab03dd2bcb
    Change Logs
    core
    • Fixed bug #63206 (restore_error_handler does not restore previous errors mask).
    com
    • Fixed bug #66322 (COMPersistHelper::SaveToFile can save to wrong location).
    • Fixed bug #79242 (COM error constants don't match com_exception codes on x86).
    • Fixed bug #79248 (Traversing empty VT_ARRAY throws com_exception).
    • Fixed bug #79299 (com_print_typeinfo prints duplicate variables).
    • Fixed bug #79332 (php_istreams are never freed).
    • Fixed bug #79333 (com_print_typeinfo() leaks memory).
    dom
    • Fixed bug #77569: (Write Access Violation in DomImplementation).
    • Fixed bug #79271 (DOMDocumentType::$childNodes is NULL).
    enchant
    • Fixed bug #79311 (enchant_dict_suggest() fails on big endian architecture).
    exif
    • Fixed bug #79282 (Use-of-uninitialized-value in exif). (CVE-2020-7064)
    mbstring
    • Fixed bug #79371 (mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full). (CVE-2020-7065)
    mysqli
    • Fixed bug #64032 (mysqli reports different client_version).
    pcre
    • Fixed bug #79188 (Memory corruption in preg_replace/preg_replace_callback and unicode).
    pdo_odbc
    • Fixed bug #79038 (PDOStatement::nextRowset() leaks column values).
    reflection
    • Fixed bug #79062 (Property with heredoc default value returns false for getDocComment).
    sqlite3
    • Fixed bug #79294 (::columnType() may fail after SQLite3Stmt::reset()).
    standard
    • Fixed bug #79329 (get_headers() silently truncates after a null byte). (CVE-2020-7066)
    • Fixed bug #79254 (getenv() w/o arguments not showing changes).
    • Fixed bug #79265 (Improper injection of Host header when using fopen for http requests).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top