PHP Release 7.3.5


    PHP 7.3.5 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.3.5. This is a security release which also contains several bug fixes.

    All PHP 7.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.3.5 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.3.5 (tar.bz2)
    SHA256: 4380b80ef98267c3823c3416eb05f7729ba7a33de6b3d14ec96013215d62c35e
    PHP 7.3.5 (tar.gz)
    SHA256: c953749b7f3310a3a74f920ef698f6d1c04636d11656ac9ffb3ab10d34e30e1e
    PHP 7.3.5 (tar.xz)
    SHA256: e1011838a46fd4a195c8453b333916622d7ff5bce4aca2d9d99afac142db2472
    Change Logs
    core
    • Fixed bug #77903 (ArrayIterator stops iterating after offsetSet call).
    cli
    • Fixed bug #77794 (Incorrect Date header format in built-in server).
    • EXIF
    • Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). (CVE-2019-11036)
    interbase
    • Fixed bug #72175 (Impossibility of creating multiple connections to Interbase with php 7.x).
    intl
    • Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if $locale = null).
    ldap
    • Fixed bug #77869 (Core dump when using server controls)
    • Mail
    • Fixed bug #77821 (Potential heap corruption in TSendMail()).
    mbstring
    • Implemented FR #72777 (Implement regex stack limits for mbregex functions).
    mysqli
    • Fixed bug #77773 (Unbuffered queries leak memory - MySQLi / mysqlnd).
    pcre
    • Fixed bug #77827 (preg_match does not ignore \r in regex flags).
    pdo
    • Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
    phpdbg
    • Fixed bug #76801 (too many open files).
    • Fixed bug #77800 (phpdbg segfaults on listing some conditional breakpoints).
    • Fixed bug #77805 (phpdbg build fails when readline is shared).
    reflection
    • Fixed bug #77772 (ReflectionClass::getMethods(null) doesn't work).
    • Fixed bug #77882 (Different behavior: always calls destructor).
    standard
    • Fixed bug #77793 (Segmentation fault in extract() when overwriting reference with itself).
    • Fixed bug #77844 (Crash due to null pointer in parse_ini_string with INI_SCANNER_TYPED).
    • Fixed bug #77853 (Inconsistent substr_compare behaviour with empty haystack).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top