PHP 7.3.13: Downloads, Changelog, News

Release Information

Release
7.3.13
PHP Version
PHP 7.3
Release Date
Release Type
Security Update
Release Status
EOL, Use PHP 7.3.33
Branch Status
Unsupported

PHP 7.3 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.3.13 is not recommended. PHP 7.3.33 is the latest version in the series.

Downloads

Source Code

Git Clone
Use Git to clone the 7.3.13 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.3.13
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.13-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.3.13-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.13-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.3.13-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.3.13-fpm

ChangeLog

Bcmath

Core

  • Fixed bug #78862 (link() silently truncates after a null byte on Windows). (CVE-2019-11044).
  • Fixed bug #78863 (DirectoryIterator class silently truncates after a null byte). (CVE-2019-11045).
  • Fixed bug #78943 (mail() may release string with refcount==1 twice). (CVE-2019-11049).
  • Fixed bug #78787 (Segfault with trait overriding inherited private shadow property).
  • Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value).
  • Fixed bug #78296 (is_file fails to detect file).

EXIF

GD

  • Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW).

MBString

  • Upgraded bundled Oniguruma to 6.9.4.

OPcache

  • Fixed potential ASLR related invalid opline handler issues.
  • Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).

PCRE

  • Fixed bug #78853 (preg_match() may return integer > 1).

Standard

  • Fixed bug #78759 (array_search in $GLOBALS).
  • Fixed bug #77638 (var_export'ing certain class instances segfaults).
  • Fixed bug #78840 (imploding $GLOBALS crashes).
  • Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
  • Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).

Commit List

Christoph M. Becker

Dmitry Stogov

  • Fixed wrong constant usage in 9083e178f6
  • Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value) in bb30fe9e2b

George Wang

  • Added environment LSAPI_CLEAN_SHUTDOWN to control clean shutdown. Update SAPI version to LiteSpeed v7.6 in c7141412ce

Levi Morrison

  • Wrap hrtime in extern "c" {} in b9dfa12853
  • Wrap php_random.h in C++ portability macros in 4a55794b98

Nikita Popov

Remi Collet

Stanislav Malyshev

Tyson Andre

  • Fix $x = (bool)$x; for undefined with opcache in a2c41c0ea6
Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.