PHP 7.3.1: Downloads, Changelog, News

Release Information

PHP Version
PHP 7.3
Release Date
Release Type
Bug Fix Release
Release Status
EOL, Use PHP 7.3.33
Branch Status

PHP 7.3 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.3.1 is not recommended. PHP 7.3.33 is the latest version in the series.


Source Code

Git Clone
Use Git to clone the 7.3.1 tag from the PHP Git repository.
git clone --depth 1 --branch php-7.3.1
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries

Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.1-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.3.1-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.1-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.3.1-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.3.1-fpm



  • Fixed bug #76654 (Build failure on Mac OS X on 32-bit Intel).
  • Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
  • Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
  • Fixed bug #77291 (magic methods inherited from a trait may be ignored).


  • Fixed bug #77264 (curl_getinfo returning microseconds, not seconds).


  • Fixed bug #77177 (Serializing or unserializing COM objects crashes).


  • Fixed bug #77184 (Unsigned rational numbers are written out as signed rationals).


  • Fixed bug #77195 (Incorrect error handling of imagecreatefromjpeg()).
  • Fixed bug #77198 (auto cropping has insufficient precision).
  • Fixed bug #77200 (imagecropauto(…, GD_CROP_SIDES) crops left but not right).
  • Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads to use-after-free).
  • Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).


  • Fixed bug #77367 (Negative size parameter in mb_split).
  • Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
  • Fixed bug #77371 (heap buffer overflow in mb regex functions - compile_string_node).
  • Fixed bug #77381 (heap buffer overflow in multibyte match_at).
  • Fixed bug #77382 (heap buffer overflow due to incorrect length in expand_case_fold_string).
  • Fixed bug #77385 (buffer overflow in fetch_token).
  • Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
  • Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).


  • Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
  • Added oci_set_call_timeout() for call timeouts.
  • Added oci_set_db_operation() for the DBOP end-to-end-tracing attribute.


  • Fixed bug #77215 (CFG assertion failure on multiple finalizing switch frees in one block).
  • Fixed bug #77275 (OPcache optimization problem for ArrayAccess->offsetGet).


  • Fixed bug #77193 (Infinite loop in preg_replace_callback).


  • Handle invalid index passed to PDOStatement::fetchColumn() as error.


  • Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).


  • Fixed bug #77088 (Segfault when using SoapClient with null options).


  • Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).


  • Fixed bug #77297 (SodiumException segfaults on PHP 7.3).


  • Fixed bug #77359 (spl_autoload causes segfault).
  • Fixed bug #77360 (class_uses causes segfault).


  • Fixed bug #77051 (Issue with re-binding on SQLite3).


  • Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
  • Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

Commit List

Adam Baratz

Alexander Kurilo

  • Regenerate certificates for openssl tests in 655fb96354
  • Regenerate certificates for openssl tests in 0382e761d7

Anatol Belski


Christopher Jones

Christoph M. Becker

Colin Basnett

Côme Chilliet

Derick Rethans

  • Fixed bug #77097 (DateTime::diff gives wrong diff when the actual diff is less than 1 second) by upgrading to timelib 2017.09 in a3f2871b8e
  • Back to -dev in 77b1f5baa3

Ferenc Kovacs

Frank Denis

  • ext/sodium: Correct base64 decoding with unpadded variants in 542d0bce50
  • ext/sodium: remove redundant code in ff02d50909

Jakub Zelenka

  • Update UPGRADING with info about FPM logging changes in 6493d54897


  • When releasing an oci8 connection always set the resource to null in 3c91851874

Lauri Kenttä

Mizunashi Mana

  • Define __APPLE_USE_RFC_3542 for new ipv6 constants in e672cd4385

Nikita Popov

Philip Prindeville

  • Don't need interactive progress on git clones in Travis in 61af343768

Pierrick Charron

  • Fix 77264: curl_getinfo returning microseconds, not seconds in b3a6ca90af

Remi Collet

Ryan Schmidt

  • Fix __zend_cpuid on i386 PIC without __cpuid_count in 4fb019994a

Sara Golemon


Sergei Morozov

  • Check column number before trying to fetch the value in e126ca1557

Stanislav Malyshev

Valentin V. Bartenev

Xinchen Hui

Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.