Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.3 » 7.3.33 »

PHP 7.3.8

PHP 7.3 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.3 is 7.3.33 which includes important security patches.

Source Code

  • PHP 7.3.8 (tar.bz2)

    • sha256: d566c630175d9fa84a98d3c9170ec033069e9e20c8d23dea49ae2a976b6c76f5

  • PHP 7.3.8 (tar.gz)

    • sha256: 31af3eff3337fb70733c9b02a3444c3dae662ecab20aeec7fdc3c42e22071490

  • PHP 7.3.8 (tar.xz)

    • sha256: f6046b2ae625d8c04310bda0737ac660dc5563a8e04e8a46c1ee24ea414ad5a5

Change Log

  • core

    • Added syslog.filter=raw option.
      Erik Lundin
    • Fixed bug #78212 (Segfault in built-in webserver).
      cmb

  • date

    • Fixed bug #69044 (discrepency between time and microtime).
      krakjoe
    • Updated timelib to 2018.02.
      Derick

  • exif

    • Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042)
      Stas
    • Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041)
      Stas

  • ftp

    • Fixed bug #78039 (FTP with SSL memory leak).
      Nikita

  • libxml

    • Fixed bug #78279 (libxml_disable_entity_loader settings is shared between requests (cgi-fcgi)).
      Nikita

  • litespeed

    • Updated to LiteSpeed SAPI V7.4.3 (increased response header count limit from 100 to 1000, added crash handler to cleanly shutdown PHP request, added CloudLinux mod_lsapi mode).
      George Wang
    • Fixed bug #76058 (After "POST data can't be buffered", using php://input makes huge tmp files).
      George Wang

  • openssl

    • Fixed bug #78231 (Segmentation fault upon stream_socket_accept of exported socket-to-stream).
      Nikita

  • opcache

    • Fixed bug #78189 (file cache strips last character of uname hash).
      cmb
    • Fixed bug #78202 (Opcache stats for cache hits are capped at 32bit NUM).
      cmb
    • Fixed bug #78271 (Invalid result of if-else).
      Nikita
    • Fixed bug #78291 (opcache_get_configuration doesn't list all directives).
      Andrew Collington
    • Fixed bug #78341 (Failure to detect smart branch in DFA pass).
      Nikita

  • pcre

    • Fixed bug #78197 (PCRE2 version check in configure fails for "##.##-xxx" version strings).
      pgnet
      Peter Kokot
    • Fixed bug #78338 (Array cross-border reading in PCRE).
      cmb

  • pdo_sqlite

    • Fixed bug #78192 (SegFault when reuse statement after schema has changed).
      Vincent Quatrevieux

  • phar

    • Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN).
      cmb

  • phpdbg

    • Fixed bug #78297 (Include unexistent file memory leak).
      Nikita

  • sqlite

    • Upgraded to SQLite 3.28.0.
      cmb

  • standard

    • Fixed bug #78241 (touch() does not handle dates after 2038 in PHP 64-bit).
      cmb
    • Fixed bug #78269 (password_hash uses weak options for argon2).
      Remi

PHP 7.3


  Represents a security release