PHP Release 7.3.9


PHP 7.3.9 Release Announcement

The PHP development team announces the immediate availability of PHP 7.3.9. This is a security release which also contains several bug fixes.

All PHP 7.3 users are encouraged to upgrade to this version.

For source downloads of PHP 7.3.9 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 7.3.9 (tar.bz2)
SHA256: a39c9709a8c9eb7ea8ac4933ef7a78b92f7e5735a405c8b8e42ee39541d963c4
PHP 7.3.9 (tar.gz)
SHA256: 5ecc1b1ad7228ed2e99a970c45358871644fcab1d9fd079a7b129326a7bde42d
PHP 7.3.9 (tar.xz)
SHA256: 4007f24a39822bef2805b75c625551d30be9eeed329d52eb0838fa5c1b91c1fd
Change Logs
core
  • Fixed bug #78363 (Buffer overflow in zendparse).
  • Fixed bug #78379 (Cast to object confuses GC, causes crash).
  • Fixed bug #78412 (Generator incorrectly reports non-releasable $this as GC child).
curl
  • Fixed bug #77946 (Bad cURL resources returned by curl_multi_info_read()).
exif
  • Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and invalid cast).
fpm
  • Fixed bug #77185 (Use-after-free in FPM master event handling).
iconv
  • Fixed bug #78342 (Bus error in configure test for iconv //IGNORE).
litespeed
  • Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown).
mbstring
  • Fixed bug #78380 (Oniguruma 6.9.3 fixes CVEs). (CVE-2019-13224)
mysqlnd
  • Fixed bug #78179 (MariaDB server version incorrectly detected).
  • Fixed bug #78213 (Empty row pocket).
opcache
  • Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing is used).
standard
  • Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL stream) with invalid length).
  • Fixed bug #78282 (atime and mtime mismatch).
  • Fixed bug #78326 (improper memory deallocation on stream_get_contents() with fixed length buffer).
  • Fixed bug #78346 (strip_tags no longer handling nested php tags).
To Top