PHP Release 7.3.18


PHP 7.3.18 Release Announcement

The PHP development team announces the immediate availability of PHP 7.3.18 This is a security release which also contains several bug fixes.

All PHP 7.3 users are encouraged to upgrade to this version.

For source downloads of PHP 7.3.18 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 7.3.18 (tar.bz2)
SHA256: 749d21f65deb57153b575f846705f5db54732c6b672e80612b29dcf1a53be8a4
PHP 7.3.18 (tar.gz)
SHA256: 3211d5d6ea8a27c2794498a551bf26e334bc2b986741971809c9bb650eaa47a3
PHP 7.3.18 (tar.xz)
SHA256: 7b3e2479a8d6fd7666dcdef8aec50d49c4599cc6ee86e48d41724cfd99cc9e58
Change Logs
core
  • Fixed bug #78875 (Long filenames cause OOM and temp files are not cleaned). (CVE-2019-11048)
  • Fixed bug #78876 (Long variables in multipart/form-data cause OOM and temp files are not cleaned). (CVE-2019-11048)
  • Fixed bug #79434 (PHP 7.3 and PHP-7.4 crash with NULL-pointer dereference on !CS constant).
  • Fixed bug #79477 (casting object into array creates references).
  • Fixed bug #79470 (PHP incompatible with 3rd party file system on demand).
  • Fixed bug #78784 (Unable to interact with files inside a VFS for Git repository).
dom
  • Fixed bug #78221 (DOMNode::normalize() doesn't remove empty text nodes).
fcgi
  • Fixed bug #79491 (Search for .user.ini extends up to root dir).
mbstring
  • Fixed bug #79441 (Segfault in mb_chr() if internal encoding is unsupported).
openssl
  • Fixed bug #79497 (stream_socket_client() throws an unknown error sometimes with <1s timeout).
phar
  • Fix bug #79503 (Memory leak on duplicate metadata).
simplexml
  • Fixed bug #79528 (Different object of the same xml between 7.4.5 and 7.4.4).
standard
  • Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter appended).
To Top