PHP Release 7.3.6


    PHP 7.3.6 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.3.6. This is a security release which also contains several bug fixes.

    All PHP 7.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.3.6 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.3.6 (tar.bz2)
    SHA256: 1e5ac8700154835c0910e3a814517da9b87bb4a82cc7011fea1a82096b6f6f77
    PHP 7.3.6 (tar.gz)
    SHA256: 72fbf223ff8659a61eed08eebffb4ede0256e7a69d2151ae24affa5377b70bb8
    PHP 7.3.6 (tar.xz)
    SHA256: fefc8967daa30ebc375b2ab2857f97da94ca81921b722ddac86b29e15c54a164
    Change Logs
    curl
    • Implemented FR #72189 (Add missing CURL_VERSION_* constants).
    date
    • Fixed bug #77909 (DatePeriod::__construct() with invalid recurrence count value).
    exif
    • Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040)
    fpm
    • Fixed bug #77934 (php-fpm kill -USR2 not working).
    • Fixed bug #77921 (static.php.net doesn't work anymore).
    gd
    • Fixed bug #77943 (imageantialias($image, false); does not work).
    • Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038)
    iconv
    • Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). (CVE-2019-11039).
    json
    • Fixed bug #77843 (Use after free with json serializer).
    opcache
    • Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset.
    pdo_mysql
    • Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
    reflection
    • Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
    session
    • Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
    soap
    • Fixed bug #77945 (Segmentation fault when constructing SoapClient with WSDL_CACHE_BOTH).
    spl
    • Fixed bug #77024 (SplFileObject::__toString() may return array).
    sqlite
    • Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).
    standard
    • Fixed bug #77931 (Warning for array_map mentions wrong type).
    • Fixed bug #78003 (strip_tags output change since PHP 7.3).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top