Home » Releases » 7.3 » 7.3.33 »

PHP 7.3.3

PHP 7.3 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.3 is 7.3.33 which includes important security patches.

Source Code

  • PHP 7.3.3 (tar.bz2)

    • sha256: 61969e943adfea79701a34b8e701edd3f95be829d16601a4aabeb05f83023ce6
  • PHP 7.3.3 (tar.gz)

    • sha256: 9bde40cbf8608ae9c595a6643a02cf0c692c131e2b3619af3fd2af8425d8e677
  • PHP 7.3.3 (tar.xz)

    • sha256: 6bb03e79a183d0cb059a6d117bbb2e0679cab667fb713a13c6a16f56bebab9b3

Change Log

  • core

    • Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).
      Laruence
    • Fixed bug #77329 (Buffer Overflow via overly long Error Messages).
      Dmitry
    • Fixed bug #77494 (Disabling class causes segfault on member access).
      Dmitry
    • Fixed bug #77498 (Custom extension Segmentation fault when declare static property).
      Nikita
    • Fixed bug #77530 (PHP crashes when parsing `(2)::class`).
      Ekin
    • Fixed bug #77546 (iptcembed broken function).
      gdegoulet
    • Fixed bug #77630 (rename() across the device may allow unwanted access during processing).
      Stas
  • com

    • Fixed bug #77621 (Already defined constants are not properly reported).
      cmb
    • Fixed bug #77626 (Persistence confusion in php_com_import_typelib()).
      cmb
  • exif

    • Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
      Stas
    • Fixed bug #77540 (Invalid Read on exif_process_SOFn).
      Stas
    • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
      Stas
    • Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
      Stas
  • mbstring

    • Fixed bug #77514 (mb_ereg_replace() with trailing backslash adds null byte).
      Nikita
  • mysql

    • Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.
      Darek Slusarczyk
  • openssl

    • Fixed bug #77390 (feof might hang on TLS streams in case of fragmented TLS records).
      Abyl Valg
      Jakub Zelenka
  • pdo_oci

    • Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.
      Cameron Porter
  • phar

    • Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
      bishop
    • Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).
      bishop
  • phpdbg

    • Fixed bug #76596 (phpdbg support for display_errors=stderr).
      kabel
  • spl

    • Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).
      Ahmed Abdou
    • Fixed bug #77431 (openFile() silently truncates after a null byte).
      cmb
  • standard

    • Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
      John Stevenson
    • Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of its options filled).
      Nikita

PHP 7.3


  Represents a security release