PHP 7.3.3: Downloads, Changelog, News

Release Information

Release
7.3.3
PHP Version
PHP 7.3
Release Date
Release Type
Bug Fix Release
Release Status
EOL, Use PHP 7.3.33
Branch Status
Unsupported

PHP 7.3 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.3.3 is not recommended. PHP 7.3.33 is the latest version in the series.

Downloads

Source Code

Git Clone
Use Git to clone the 7.3.3 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.3.3
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.3-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.3.3-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.3-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.3.3-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.3.3-fpm

ChangeLog

Core

  • Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).
  • Fixed bug #77329 (Buffer Overflow via overly long Error Messages).
  • Fixed bug #77494 (Disabling class causes segfault on member access).
  • Fixed bug #77498 (Custom extension Segmentation fault when declare static property).
  • Fixed bug #77530 (PHP crashes when parsing (2)::class).
  • Fixed bug #77546 (iptcembed broken function).
  • Fixed bug #77630 (rename() across the device may allow unwanted access during processing).

COM

  • Fixed bug #77621 (Already defined constants are not properly reported).
  • Fixed bug #77626 (Persistence confusion in php_com_import_typelib()).

EXIF

  • Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
  • Fixed bug #77540 (Invalid Read on exif_process_SOFn).
  • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
  • Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

Mbstring

  • Fixed bug #77514 (mb_ereg_replace() with trailing backslash adds null byte).

MySQL

  • Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.

OpenSSL

  • Fixed bug #77390 (feof might hang on TLS streams in case of fragmented TLS records).

PDO_OCI

  • Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.

PHAR

  • Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
  • Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).

phpdbg

  • Fixed bug #76596 (phpdbg support for display_errors=stderr).

SPL

  • Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).
  • Fixed bug #77431 (openFile() silently truncates after a null byte).

Standard

  • Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
  • Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of its options filled).

Commit List

Abyr Valg

  • Add a test for fragmented SSL packets in 0c84c2ef50

Ahmed Abdou

Anatol Belski

Ben Ramsey

Cameron Porter

  • pdo_oci: Add PDO_OCI_ATTR_ACTION and CLIENT_INFO in a095472e62
  • pdo_oci: Register new attr constants and add tests in fc940f0703
  • pdo_oci: Add client identifier and module attrs in 38363f4820

Christopher Jones

Christoph M. Becker

DanielCiochiu

Darek Slusarczyk

  • security fix - by default 'local infile' is disabled: in 2eaabf06fc

Derick Rethans

  • Use pkg-config for ICU, as the old icu-config has been deprecated in e2edaa0cee
  • Use pkg-config for ICU, as the old icu-config has been deprecated in 65d81833bb

Dmitry Stogov

  • Fixed bug #77494 (Disabling class causes segfault on member access) in 73f222d722
  • Fixed bug #77329 (Buffer Overflow via overly long Error Messages) in 203a2da30a
  • Avoid dependency on "struct flock" fields order in 9222702633
  • Fixed bug #77599 (Unbuffered queries; native prepared statements memory leak) in b6e58dcd22

ekinhbayar

Guillaume Degoulet

Guilliam Xavier

  • Fix tests bareword fallback with error suppression in b3935ed2af

hsldymq

  • Make pid & uid available while handling realtime signals in b5cb3ac8ec

Jakub Zelenka

  • Update and integrate openssl client proxy test in d9b29029f9
  • Fix bug #77390 (feof might hang on TLS streams in case of fragmented TLS records) in dc2ffdeed7

johnstevenson

Kevin Abel

  • Fix bug 76596: phpdbg supports display_errors=stderr in 3890c8bce5

Nikita Popov

Peter Kokot

Tyson Andre

  • Properly check for array_replace_recursive in sccp.c in cf56832d00

Xinchen Hui

  • Fixed bug #77589 (Core dump using parse_ini_string with numeric sections) in 92055ca79b
  • regenerate with re2c 1.0.3 in 515c51953f

YanTao

  • Fix FTPS passive mode of data channel event poll in 3b09123de3
Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.

Support PHP.Watch — If you find the articles, version information, Codex, and other PHP.Watch contributions useful, consider supporting through GitHub Sponsors. Your sponsorship helps dedicate more time to creating valuable content and improving the PHP community. Together, we can keep the momentum going — thank you for your support!

Thanks to the highest tier sponsor: @TomasVotruba for your generous support to keep PHP.Watch moving 💜