PHP Release 7.3.17


PHP 7.3.17 Release Announcement

The PHP development team announces the immediate availability of PHP 7.3.17 This is a security release which also contains several bug fixes.

All PHP 7.3 users are encouraged to upgrade to this version.

For source downloads of PHP 7.3.17 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 7.3.17 (tar.bz2)
SHA256: d83e90d9024c999f209933732ed4e1d0e7295a67c66ab79490898ea0a4a29709
PHP 7.3.17 (tar.gz)
SHA256: 0dd484382b8f17dfa8afd44236a5ccf374e1f03de06ef826ebcbda98eadc7bda
PHP 7.3.17 (tar.xz)
SHA256: 6a30304c27f7e7a94538f5ffec599f600ee93aedbbecad8aa4f8bec539b10ad8
Change Logs
core
  • Fixed bug #79364 (When copy empty array, next key is unspecified).
  • Fixed bug #78210 (Invalid pointer address).
curl
  • Fixed bug #79199 (curl_copy_handle() memory leak).
date
  • Fixed bug #79396 (DateTime hour incorrect during DST jump forward).
iconv
  • Fixed bug #79200 (Some iconv functions cut Windows-1258).
opcache
  • Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
session
  • Fixed bug #79413 (session_create_id() fails for active sessions).
shmop
  • Fixed bug #79427 (Integer Overflow in shmop_open()).
simplexml
  • Fixed bug #61597 (SXE properties may lack attributes and content).
spl
  • Fixed bug #75673 (SplStack::unserialize() behavior).
  • Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
standard
  • Fixed bug #79330 (shell_exec() silently truncates after a null byte).
  • Fixed bug #79465 (OOB Read in urldecode()). (CVE-2020-7067)
  • Fixed bug #79410 (system() swallows last chunk if it is exactly 4095 bytes without newline).
zip
  • Fixed Bug #79296 (ZipArchive::open fails on empty file).
  • Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).
To Top