PHP 7.3 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.3.1 is not recommended. PHP 7.3.33 is the latest version in the series.
Downloads
Source Code
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.3.1
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Docker/Podman Containers
docker pull php:7.3.1-cli-alpine
docker pull php:7.3.1-cli
docker pull php:7.3.1-fpm-alpine
docker pull php:7.3.1-apache
docker pull php:7.3.1-fpm
ChangeLog
Core
- Fixed bug #76654 (Build failure on Mac OS X on 32-bit Intel).
- Fixed bug #71041 (
zend_signal_startup()
needsZEND_API
). - Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
- Fixed bug #77291 (magic methods inherited from a trait may be ignored).
CURL
- Fixed bug #77264 (curl_getinfo returning microseconds, not seconds).
COM
- Fixed bug #77177 (Serializing or unserializing COM objects crashes).
Exif
- Fixed bug #77184 (Unsigned rational numbers are written out as signed rationals).
GD
- Fixed bug #77195 (Incorrect error handling of
imagecreatefromjpeg()
). - Fixed bug #77198 (auto cropping has insufficient precision).
- Fixed bug #77200 (imagecropauto(…, GD_CROP_SIDES) crops left but not right).
- Fixed bug #77269 (
efree()
on uninitialized Heap data in imagescale leads to use-after-free). - Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
MBString
- Fixed bug #77367 (Negative size parameter in
mb_split
). - Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
- Fixed bug #77371 (heap buffer overflow in mb regex functions - compile_string_node).
- Fixed bug #77381 (heap buffer overflow in multibyte match_at).
- Fixed bug #77382 (heap buffer overflow due to incorrect length in expand_case_fold_string).
- Fixed bug #77385 (buffer overflow in fetch_token).
- Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
- Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
OCI8
- Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
- Added
oci_set_call_timeout()
for call timeouts. - Added
oci_set_db_operation()
for the DBOP end-to-end-tracing attribute.
Opcache
- Fixed bug #77215 (CFG assertion failure on multiple finalizing switch frees in one block).
- Fixed bug #77275 (OPcache optimization problem for ArrayAccess->offsetGet).
PCRE
- Fixed bug #77193 (Infinite loop in preg_replace_callback).
PDO
- Handle invalid index passed to
PDOStatement::fetchColumn()
as error.
Phar
- Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
Soap
- Fixed bug #77088 (Segfault when using SoapClient with null options).
Sockets
- Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).
Sodium
- Fixed bug #77297 (SodiumException segfaults on PHP 7.3).
SPL
SQLite3
- Fixed bug #77051 (Issue with re-binding on SQLite3).
Xmlrpc
Commit List
Adam Baratz
- update NEWS in 2c4425a87a
Alexander Kurilo
- Regenerate certificates for openssl tests in 655fb96354
- Regenerate certificates for openssl tests in 0382e761d7
Anatol Belski
- Fixed bug #77193 Infinite loop in preg_replace_callback in ef1269d5c1
- Fix libtidy exports when
ext/tidy
compiled static in 0d166f76ee - Fix syntax error in 81207fc607
- Remove BOM in 7dc1c7f630
BohwaZ
- Fix #77051: Issue with re-binding on SQLite3 in 94ec262fca
Christopher Jones
- Sync with test files in 91776f7264
- Simplify based on feedback from nikic in b797818e09
- Update NEWS in 8ff6a30598
- Update NEWS in 78c299ae2d
- Bump OCI8 version in 2d53040a6d
- Fix resource warning value in dd0a8091f4
- Don't skip with 18c DB in 9a0ec35fa3
- Note that PECL install now works on PHP 7.3 in 43adf3dc5e
- Convert some parameter parsing to the Fast Parameter Parsing API in 216d6592e1
- Update OCI8 README in 465c149cd3
- Enable Oracle Database DBOP tracing attribute in 4246702406
- Upgrade internal OCI call in e2ecd60f2f
- Add
oci_set_call_timeout()
and bump version to 2.10.0 in 99f1f3dedf - Add OCI8 changes in 8c37d5f451
- Update for newer Oracle versions in 56e2c0d7db
- Improve test portability in e4d894edb3
- Bundle the new test in 444e400c3b
- LOL I had 2.10 on my mind in 3aee9ca571
Christoph M. Becker
- Fix #77177: Serializing or unserializing COM objects crashes in 115ee49b0b
- Fix #77195: Incorrect error handling of
imagecreatefromjpeg()
in 60a9f7a3a3 - Fix test case in 5af5f56fc9
- Fix #77198: auto cropping has insufficient precision in b47b8886dd
- Fix #77200: imagecropauto(…, GD_CROP_SIDES) crops left but not right in a1aaec08b5
- Use
zend_empty_array
in 07d6dfbfe4 - Fix version numbers in main branch in b0177d3892
- Update/fix UPGRADING in 9b335c5649
- Fix #77291: magic methods inherited from a trait may be ignored in 0061db5503
- Update version for PHP 7.3.1RC1 in 809d27a06b
- Fix release date in NEWS in 4371c1a8b5
- Fix #77269: Potential unsigned underflow in gdImageScale in c1edfc748b
- Fix #77270: imagecolormatch Out Of Bounds Write on Heap in a15af81b5f
- Fix #77367: Negative size parameter in
mb_split
in 11ce508ee3 - Fix test in 059c720c4c
- Cumulative fix for bugs #77370, #77371, #77381, #77382, #77385 and #77394 in 12583615da
- Update version for PHP 7.3.1 in b51be55fe5
Colin Basnett
- Fixed bug #77184 in 9ec519e094
Côme Chilliet
- Add LDAP information in UPGRADING in cb00ca7cfe
Derick Rethans
- Fixed bug #77097 (
DateTime::diff
gives wrong diff when the actual diff is less than 1 second) by upgrading to timelib 2017.09 in a3f2871b8e - Back to -dev in 77b1f5baa3
Ferenc Kovacs
- 5.6.40 will be next. probably not in c26cb383a5
Frank Denis
ext/sodium
: Correct base64 decoding with unpadded variants in 542d0bce50ext/sodium
: remove redundant code in ff02d50909
Jakub Zelenka
- Update UPGRADING with info about FPM logging changes in 6493d54897
KoenigsKind
- When releasing an oci8 connection always set the resource to null in 3c91851874
Lauri Kenttä
- Fix #77359: spl_autoload causes segfault in 7d638d0880
- Fix #77360: class_uses causes segfault in f45ed833d1
Mizunashi Mana
- Define __APPLE_USE_RFC_3542 for new ipv6 constants in e672cd4385
Nikita Popov
- Fixed bug #76046 in d6595f276f
- Improve fix for #76046 in b565c85b9e
- Fixed bug #77215 in 17f8b9fb36
- Drop unnecessary HASH_OF uses in ext/oci8 in e3946534a4
- Fix typos in compact literals debugging code in 59cacdcefd
- Fixed bug #77275 in 93aabf1533
- Fix invalid efree in browscap in d0ccbfbe43
- Disable ifuncs on FreeBSD in 6786a31b32
Philip Prindeville
- Don't need interactive progress on git clones in Travis in 61af343768
Pierrick Charron
- Fix 77264: curl_getinfo returning microseconds, not seconds in b3a6ca90af
Remi Collet
- missing entry for #77020 in 9b8f2417ad
- missing entry for #77020 in 431ff36f51
- add imap.enable_insecure_rsh in php.ini in 4288674651
Ryan Schmidt
- Fix __zend_cpuid on i386 PIC without __cpuid_count in 4fb019994a
Sara Golemon
- Bump for 7.2.14 in 9fc52c16b5
- Prep for 7.1.26 in 0b3cbd665e
Scott
- Fix #77297: SodiumException segfaults on PHP 7.3 in e0e08d376e
Sergei Morozov
- Check column number before trying to fetch the value in e126ca1557
Stanislav Malyshev
- Disable rsh/ssh functionality in imap by default (bug #77153) in e5bfea64c8
- Disable rsh/ssh functionality in imap by default (bug #77153) in 628df47e79
- Disable rsh/ssh functionality in imap by default (bug #77153) in 05782f01f5
- Disable rsh/ssh functionality in imap by default (bug #77153) in 336d2086a9
- Disable rsh/ssh functionality in imap by default (bug #77153) in 44b08a9802
- Add DISPLAY_INI_ENTRIES for imap in d8765852e0
- Fix bug #77022 - use file mode or umask for new files in 69f5e7992b
- Improve test for bug77022 in 2fba1e2f59
- Fix TSRM signature -
php_stream_stat
macro has it's own TSRM in aabdb71dc3 - Fix #77020: null pointer dereference in imap_mail in 7edc639b9f
- Fix bug #77143 - add more checks to buffer reads in 54212674b9
- Fix bug #77143 - add more checks to buffer reads in 48f0f73f75
- Fix null pointer deref in qprint-encode filter (bug #77231) in 78bffa72c1
- Fix bug #77242 (heap out of bounds read in
xmlrpc_decode()
) in ba3d1956eb - Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext) in 9d388b95c5
- Fix bug #77380 (Global out of bounds read in xmlrpc base64 code) in 027f68ff10
- Fix bug #77418 - Heap overflow in utf32be_mbc_to_code in b6fe458ef9
Valentin V. Bartenev
- Fix bug #71041 dynamic embed SAPI load error in 11ddf7669a
Xinchen Hui
- Fixed proto & folder mark in efeb810a3d
- Fixed bug #77088 (Segfault when using SoapClient with null options) in aaafd793e6
- Update NEWS in 54739c7e66