PHP 7.3.2: Downloads, Changelog, News

Release Information

Release
7.3.2
PHP Version
PHP 7.3
Release Date
Release Type
Bug Fix Release
Release Status
EOL, Use PHP 7.3.33
Branch Status
Unsupported

PHP 7.3 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.3.2 is not recommended. PHP 7.3.33 is the latest version in the series.

Downloads

Source Code

Git Clone
Use Git to clone the 7.3.2 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.3.2
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.2-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.3.2-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.2-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.3.2-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.3.2-fpm

ChangeLog

Core

  • Fixed bug #77369 (memcpy with negative length via crafted DNS response).
  • Fixed bug #77387 (Recursion detection broken when printing GLOBALS).
  • Fixed bug #77376 ("undefined function" message no longer includes namespace).
  • Fixed bug #77357 (base64_encode / base64_decode doest not work on nested VM).
  • Fixed bug #77339 (__callStatic may get incorrect arguments).
  • Fixed bug #77317 (DIR, FILE, realpath() reveal physical path for subst virtual drive).
  • Fixed bug #77263 (Segfault when using 2 RecursiveFilterIterator).
  • Fixed bug #77447 (PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2).
  • Fixed bug #77484 (Zend engine crashes when calling realpath in invalid working dir).

Curl

  • Fixed bug #76675 (Segfault with H2 server push).

Fileinfo

  • Fixed bug #77346 (webm files incorrectly detected as application/octet-stream).

FPM

  • Fixed bug #77430 (php-fpm crashes with Main process exited, code=dumped, status=11/SEGV).

GD

  • Fixed bug #73281 (imagescale(…, IMG_BILINEAR_FIXED) can cause black border).
  • Fixed bug #73614 (gdImageFilledArc() doesn't properly draw pies).
  • Fixed bug #77272 (imagescale() may return image resource on failure).
  • Fixed bug #77391 (1bpp BMPs may fail to be loaded).
  • Fixed bug #77479 (imagewbmp() segfaults with very large images).

ldap

  • Fixed bug #77440 (ldap_bind using ldaps or ldap_start_tls()=exception in libcrypto-1_1-x64.dll).

Mbstring

  • Fixed bug #77428 (mb_ereg_replace() doesn't replace a substitution variable).
  • Fixed bug #77454 (mb_scrub() silently truncates after a null byte).

MySQLnd

  • Fixed bug #77308 (Unbuffered queries memory leak).
  • Fixed bug #75684 (In mysqlnd_ext_plugin.h the plugin methods family has no external visibility).

Opcache

  • Fixed bug #77266 (Assertion failed in dce_live_ranges).
  • Fixed bug #77257 (value of variable assigned in a switch() construct gets lost).
  • Fixed bug #77434 (php-fpm workers are segfaulting in zend_gc_addre).
  • Fixed bug #77361 (configure fails on 64-bit AIX when opcache enabled).
  • Fixed bug #77287 (Opcache literal compaction is incompatible with EXT opcodes).

PCRE

  • Fixed bug #77338 (get_browser with empty string).

PDO

  • Fixed bug #77273 (array_walk_recursive corrupts value types leading to PDO failure).

PDO MySQL

  • Fixed bug #77289 (PDO MySQL segfaults with persistent connection).

SOAP

  • Fixed bug #77410 (Segmentation Fault when executing method with an empty parameter).

Sockets

  • Fixed bug #76839 (socket_recvfrom may return an invalid 'from' address on MacOS).

SPL

  • Fixed bug #77298 (segfault occurs when add property to unserialized empty ArrayObject).

Standard

  • Fixed bug #77395 (segfault about array_multisort).
  • Fixed bug #77439 (parse_str segfaults when inserting item into existing array).

Commit List

Alexander Kurilo

  • Regenerate certs for openssl tests in 687dad3674
  • Regenerate certs for openssl tests in f51062523d
  • Regenerate certs for openssl tests in e3e3289bd1
  • Generate certs for openssl tests on the fly in 1fab01be5b
  • Fix cleaning up after openssl_pkcs7_verify_basic test in 1a1e12c2a9

Anatol Belski

  • Fixed bug #77317 DIR, FILE, realpath() reveal physical path for subst virtual drive in 199914b42d
  • Update binary SDK version for AppVeyor in 3c7dc7b4c4
  • Fixed bug #77346 webm files incorrectly detected as application/octet-stream in d874d4a15c
  • Add memory check to the test in 222fa032d2
  • Increase timeout for test on AppVeyor in 54a2b42778
  • Fixed bug #75684 In mysqlnd_ext_plugin.h the plugin methods family has no external visibility in 7b3f8e746a
  • Update NEWS in 1732ce9c23
  • Update SDK version for AppVeyor in 8f66ca8189
  • Fixed bug #77484 Zend engine crashes when calling realpath in invalid working dir in 8b20e7b68b
  • Make test output more reliable in 4254bf87ba
  • Skip test on unsuitable build in 52730fa30a

Andrey Hristov

Christoph M. Becker

CHU Zhaowei

  • Fix #77298: segfault occurs when add property to unserialized empty ArrayObject in b15189f4d8

Derick Rethans

Dmitry Stogov

George Wang

Jakub Zelenka

Kevin Adler

  • Fix bug #77361 (configure fails on 64-bit AIX when opcache enabled) in 332b58f865

Lauri Kenttä

Michael Meyer

  • Initialize s_un (sockaddr_un) to zero before using it. Fixes #76839 in 3c42c784c2

Nikita Popov

Ondřej Surý

  • Fix rl_completion_matches detection in 1ea58b6e78

Pedro Magalhães

Remi Collet

Sara Golemon

Stanislav Malyshev

twosee

  • Prefix error_code with underscore in FastZPP implementation in 6305119a51

Vincent JARDIN

wbob

  • document open_basedir and realpath cache coupling in php.ini in 5ac9990ddf

Xinchen Hui

Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.

Support PHP.Watch — If you find the articles, version information, Codex, and other PHP.Watch contributions useful, consider supporting through GitHub Sponsors. Your sponsorship helps dedicate more time to creating valuable content and improving the PHP community. Together, we can keep the momentum going — thank you for your support!

Thanks to the highest tier sponsor: @TomasVotruba for your generous support to keep PHP.Watch moving 💜