PHP 7.3.9: Downloads, Changelog, News

Release Information

PHP Version
PHP 7.3
Release Date
Release Type
Security Update
Release Status
EOL, Use PHP 7.3.33
Branch Status

PHP 7.3 reached EOL on , and all releases of this version no longer receive security or bug fixes. Using PHP 7.3.9 is not recommended. PHP 7.3.33 is the latest version in the series.


Source Code

Git Clone
Use Git to clone the 7.3.9 tag from the PHP Git repository.
git clone --depth 1 --branch php-7.3.9
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries

Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.9-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:7.3.9-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:7.3.9-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:7.3.9-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:7.3.9-fpm



  • Fixed bug #78363 (Buffer overflow in zendparse).
  • Fixed bug #78379 (Cast to object confuses GC, causes crash).
  • Fixed bug #78412 (Generator incorrectly reports non-releasable $this as GC child).


  • Fixed bug #77946 (Bad cURL resources returned by curl_multi_info_read()).


  • Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and invalid cast).


  • Fixed bug #77185 (Use-after-free in FPM master event handling).


  • Fixed bug #78342 (Bus error in configure test for iconv //IGNORE).


  • Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown).



  • Fixed bug #78179 (MariaDB server version incorrectly detected).
  • Fixed bug #78213 (Empty row pocket).


  • Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing is used).


  • Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL stream) with invalid length).
  • Fixed bug #78282 (atime and mtime mismatch).
  • Fixed bug #78326 (improper memory deallocation on stream_get_contents() with fixed length buffer).
  • Fixed bug #78346 (strip_tags no longer handling nested php tags).

Commit List

Abyr Valg

Albert Casademont

Christoph M. Becker

Derick Rethans

Dmitry Stogov

  • Fixed bug #78379 (Cast to object confuses GC, causes crash) in 358379be22
  • Added asserts to catch GC errors when refcount goes below zero in 2e2cd65d73
  • Fixed second part of the bug #78379 (Cast to object confuses GC, causes crash) in 6b1cc1252e
  • Fixed handling of references in nested data of objects with destructor in 9b43e29d9b

George Peter Banyard

  • Convert short tag to standard tag in Zend test file in e7e66d5275

George Wang

  • Checked in LiteSpeed SAPI 7.5, addressed two main problems in "clean shutdown" introduced in 7.4.3, in eb7e45f662

Levi Morrison

  • Remove .post files only for passing tests in 5649267b25

Maksim Nikulin

  • Prevent use after free in fpm_event_epoll_wait in bdf24f8d6d

Matteo Beccati

  • Skip test when SIGKILL is not defined in 796efd849e

Nikita Popov

Peter Kokot

Remi Collet

Stanislav Malyshev

Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.