PHP 7.3 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.3.4 is not recommended. PHP 7.3.33 is the latest version in the series.
Downloads
Source Code
git clone https://github.com/php/php-src.git --depth 1 --branch php-7.3.4
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Docker/Podman Containers
docker pull php:7.3.4-cli-alpine
docker pull php:7.3.4-cli
docker pull php:7.3.4-fpm-alpine
docker pull php:7.3.4-apache
docker pull php:7.3.4-fpm
ChangeLog
Core
- Fixed bug #77738 (Nullptr deref in
zend_compile_expr
). - Fixed bug #77660 (Segmentation fault on break 2147483648).
- Fixed bug #77652 (Anonymous classes can lose their interface information).
- Fixed bug #77345 (Stack Overflow caused by circular reference in garbage collection).
- Fixed bug #76956 (Wrong value for 'syslog.filter' documented in php.ini).
Apache2Handler
- Fixed bug #77648 (BOM in sapi/apache2handler/php_functions.c).
Bcmath
- Fixed bug #77742 (
bcpow()
implementation related to gcc compiler optimization).
CLI Server
- Fixed bug #77722 (Incorrect IP set to $_SERVER['REMOTE_ADDR'] on the localhost).
COM
- Fixed bug #77578 (Crash when php unload).
EXIF
- Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
- Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). (CVE-2019-11035)
FPM
- Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
GD
- Fixed bug #77700 (Writing truecolor images as GIF ignores interlace flag).
MySQLi
- Fixed bug #77597 (mysqli_fetch_field hangs scripts).
Opcache
- Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical successors).
PCRE
- Fixed bug #76127 (preg_split does not raise an error on invalid UTF-8).
Phar
- Fixed bug #77697 (Crash on Big_Endian platform).
phpdbg
- Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match actual aliases).
sodium
- Fixed bug #77646 (
sign_detached()
strings not terminated).
SQLite3
- Added sqlite3.defensive INI directive.
Standard
- Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper).
- Fixed bug #77669 (Crash in
extract()
when overwriting extracted array). - Fixed bug #76717 (
var_export()
does not create a parsable value forPHP_INT_MIN
). - Fixed bug #77765 (FTP stream wrapper should set the directory as executable).
Commit List
Abyr Valg
- OpenSSL: Improve non-blocking eof test in 74888bede8
Anatol Belski
- Sync with behavior change in OpenSSL 1.1.1b in 19a44ffb7b
- Fix test portability in 040196972c
- Sync with behavior change in OpenSSL 1.1.1b in 66bd861fcd
- Fixed bug #77576 pull the libmagic implementation of gmtime_r in 65ffdc2adf
- Die hard if mc.exe or mt.exe not found in 6814ba11bc
bohwaz
- SQLite3: add DEFENSIVE config for SQLite >= 3.26.0 as a mitigation strategy against potential security flaws in e93259bb23
Christopher Jones
- Correct
skipif
use for OCI8 password tests in 7a9c20f3fd
Christoph M. Becker
- Prepare main branch for PHP 7.3.4 in 2ec59b3ef3
- Fix #77648: BOM in sapi/apache2handler/php_functions.c in 831eba0eac
- Fix #77431 SplFileInfo::__construct() accepts NUL bytes in 254a5914ad
- Update NEWS in 6ff0b24ef4
- Update NEWS in 007ac353dd
- Fix #77700: Writing truecolor images as GIF ignores interlace flag in 41fb0eaa11
- Fix #76956: Wrong value for 'syslog.filter' documented in php.ini in ad2d2e41de
- Add bison version check to configure in f21c054903
- Fix #77578: Crash when php unload in 41bc51ce2d
- Fix order in 5ead86a35e
- Update version for PHP 7.3.4RC1 in 9e4f47993a
- Revert "Fix #77609: Tests from mailparse extension fails" in 5b7a781a5d
- Update version for PHP 7.3.4 in 5dbc909a12
Derick Rethans
- Fixed bug #50020 (DateInterval:createDateFromString() silently fails) in a890c5beb8
- Fixed 7.2 compat issue in ab07bc1fff
Dmitry Stogov
- Fixed bug #77345 (Stack Overflow caused by circular reference in garbage collection) in 5da591c529
- ws in 0a416b3d97
Fabien Villepinte
- Fix typo in libmagic version in d9a3cb0b36
Frank Denis
- Fix bug #77646 in e7ca69f1fa
- Fix bug #77646 in 08089b575b
Ignace Nyamagana Butera
- Fixed bug #75113: Added
DatePeriod::getRecurrences()
method in 6eb83a63e1
Jakub Zelenka
- Use spaces instead of tabs in bug 77390 test in c814b34b1d
- Print empty string in test for but 77390 just once in 01c00953ff
- Speed up TLS wrapper tests when SSLv3 disabled in 769d2d9b62
- Speed up TLS wrapper test for min and max versions in f8850ccd85
Jay Satiro
- curl_error: return an empty string if no error occurred in 5025eb05bd
Joe Watkins
- bump versions after release in 58c5df3d37
- fix news in b6308f5b48
Kevin Adler
- Fix bug #77677: WCOREDUMP not available on all systems in 006355c9fa
- Fix shared module generation on AIX bug #77676 in 700f876a1a
Miriam Lauter
- Fix #77767: phpdbg break command help message shows incorrect aliases in 09e522322a
Nikita Popov
- Fix issue mentioned in #77302 in af324e24df
- Fixed bug #77597 in 934691fabb
- Fixed bug #77652 in 5388143855
- Fix inference warning about missing key type in 2cfb09caa7
- Remove result def during jmp_set optimization in 66fda0cdb1
- Fix assertion in
Exception::getMessage()
if $message is a ref in af37d58cf7 - Fixed bug #77669 in 9ad9cc71ff
- Check for NULL GC type in objects_store_del in 4dc0662eca
- Fixed bug #77691 in 3f00c9367d
- Fixed bug #76717 in 1fd32e9c2f
- Fixed bug #77722 in a7739be22f
- Fixed bug #77742 in e7d40afb7a
- Don't immediately destroy curl pushfunction in 97f9fd6949
- Fix unused variable warning in a573c0e9ed
- Remove x86 bit test optimization in c4464526cd
- Fixed bug #77743 in 54bf8c820f
- Partial fix for bug #77751 in 4f03401628
- Allow DateTimeImmutable in
datefmt_format_object()
in 433758ceb3 - Make test independent of icu version in b3a669bec1
Pedro Magalhães
- Added test for #77535 fix in f167b06d4c
Peter Kokot
- Update NEWS in c39fb1fc4f
- Update NEWS in 637713c1a4
- Update editorconfig in 488544b336
Ralf Habacker
- Fix #77609: Tests from mailparse extension fails in 3ead672394
Remi Collet
- bump version to 7.2.17-dev in b243f2feca
- add NEWS entries in 2694953ada
- add NEWS entry in 0e836f523a
Stanislav Malyshev
- Fix bug #77396 - Null Pointer Dereference in phar_create_or_parse_filename in 7f0ab7c20c
- Fix integer overflows on 32-bits in 5e824a88d0
- Fix bug #77540 - Invalid Read on exif_process_SOFn in 5f0e62a3e5
- Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE in 8ac6fee856
- Fix test error message in 44f87fbf36
- Update NEWS in 759e841b24
- Fix bug #77586 -
phar_tar_writeheaders_int()
buffer overflow in e0f5d62bd6 - Fix bug #77630 - safer
rename()
procedure in e3133e4db7
twosee
- Don't disable object slot reuse while running shutdown functions in bd6eabd659
Vlad Temian
- Fixed bug #77765 in fe2885d80a
Xinchen Hui
- Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper) in 4a72dd782d
- Update NEWS in 3b5475e9ee
- Fixed bug #77660 (Segmentation fault on break 2147483648) in 1c22ace058
- Update NEWS in fb3f078eeb
- Fixed compiler warning in 4ac954ac3e
- Fixed bug #77738 (Nullptr deref in
zend_compile_expr
) in c7920aba3e - updated NEWS in 82174e68b6
- Fixed bug #77697 (Crash on Big_Endian platform) in b419590893
- Simplfy test case in e072537e7f