PHP Release 7.3.4


PHP 7.3.4 Release Announcement

The PHP development team announces the immediate availability of PHP 7.3.4. This is a security release which also contains several bug fixes.

All PHP 7.3 users are encouraged to upgrade to this version.

For source downloads of PHP 7.3.4 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 7.3.4 (tar.bz2)
SHA256: 2e2c3d8212c83649e443b61efffbd03df4b9edd0f9c7a679081fe4cb2da12b78
PHP 7.3.4 (tar.gz)
SHA256: dd41ecf43fe1172030f41d2581909457a0af7bd137a057c3874e0b0f3c2e8761
PHP 7.3.4 (tar.xz)
SHA256: 6fe79fa1f8655f98ef6708cde8751299796d6c1e225081011f4104625b923b83
Change Logs
core
  • Fixed bug #77738 (Nullptr deref in zend_compile_expr).
  • Fixed bug #77660 (Segmentation fault on break 2147483648).
  • Fixed bug #77652 (Anonymous classes can lose their interface information).
  • Fixed bug #77345 (Stack Overflow caused by circular reference in garbage collection).
  • Fixed bug #76956 (Wrong value for 'syslog.filter' documented in php.ini).
apache2handler
  • Fixed bug #77648 (BOM in sapi/apache2handler/php_functions.c).
bcmath
  • Fixed bug #77742 (bcpow() implementation related to gcc compiler optimization).
cli server
  • Fixed bug #77722 (Incorrect IP set to $_SERVER['REMOTE_ADDR'] on the localhost).
com
  • Fixed bug #77578 (Crash when php unload).
exif
  • Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
  • Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). (CVE-2019-11035)
fpm
  • Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
gd
  • Fixed bug #77700 (Writing truecolor images as GIF ignores interlace flag).
mysqli
  • Fixed bug #77597 (mysqli_fetch_field hangs scripts).
opcache
  • Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical successors).
pcre
  • Fixed bug #76127 (preg_split does not raise an error on invalid UTF-8).
phar
  • Fixed bug #77697 (Crash on Big_Endian platform).
phpdbg
  • Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match actual aliases).
sodium
  • Fixed bug #77646 (sign_detached() strings not terminated).
sqlite3
  • Added sqlite3.defensive INI directive.
standard
  • Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper).
  • Fixed bug #77669 (Crash in extract() when overwriting extracted array).
  • Fixed bug #76717 (var_export() does not create a parsable value for PHP_INT_MIN).
  • Fixed bug #77765 (FTP stream wrapper should set the directory as executable).
To Top