Home » Releases » 7.3 » 7.3.33 »

PHP 7.3.6

PHP 7.3 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.3 is 7.3.33 which includes important security patches.

Source Code

  • PHP 7.3.6 (tar.bz2)

    • sha256: 1e5ac8700154835c0910e3a814517da9b87bb4a82cc7011fea1a82096b6f6f77
  • PHP 7.3.6 (tar.gz)

    • sha256: 72fbf223ff8659a61eed08eebffb4ede0256e7a69d2151ae24affa5377b70bb8
  • PHP 7.3.6 (tar.xz)

    • sha256: fefc8967daa30ebc375b2ab2857f97da94ca81921b722ddac86b29e15c54a164

Change Log

  • curl

    • Implemented FR #72189 (Add missing CURL_VERSION_* constants).
      Javier Spagnoletti
  • date

    • Fixed bug #77909 (DatePeriod::__construct() with invalid recurrence count value).
      Ignace Nyamagana Butera
  • exif

    • Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040)
      Stas
  • fpm

    • Fixed bug #77934 (php-fpm kill -USR2 not working).
      Jakub Zelenka
    • Fixed bug #77921 (static.php.net doesn't work anymore).
      Peter Kokot
  • gd

    • Fixed bug #77943 (imageantialias($image, false); does not work).
      cmb
    • Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038)
      cmb
  • iconv

    • Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow).
      CVE-2019-11039). (maris dot adam
  • json

    • Fixed bug #77843 (Use after free with json serializer).
      Nikita
  • opcache

    • Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset.
      Alexey Kalinin
      Dmitry
  • pdo_mysql

    • Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
      cmb
  • reflection

    • Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
      Nikita
  • session

    • Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
      cmb
  • soap

    • Fixed bug #77945 (Segmentation fault when constructing SoapClient with WSDL_CACHE_BOTH).
      Nikita
  • spl

    • Fixed bug #77024 (SplFileObject::__toString() may return array).
      Craig Duncan
  • sqlite

    • Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).
      Stas
  • standard

    • Fixed bug #77931 (Warning for array_map mentions wrong type).
      Nikita
    • Fixed bug #78003 (strip_tags output change since PHP 7.3).
      cmb

PHP 7.3


  Represents a security release