PHP Release 7.3.3


    PHP 7.3.3 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.3.3. This is a security release which also contains several bug fixes.

    All PHP 7.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.3.3 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.3.3 (tar.bz2)
    SHA256: 61969e943adfea79701a34b8e701edd3f95be829d16601a4aabeb05f83023ce6
    PHP 7.3.3 (tar.gz)
    SHA256: 9bde40cbf8608ae9c595a6643a02cf0c692c131e2b3619af3fd2af8425d8e677
    PHP 7.3.3 (tar.xz)
    SHA256: 6bb03e79a183d0cb059a6d117bbb2e0679cab667fb713a13c6a16f56bebab9b3
    Change Logs
    core
    • Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).
    • Fixed bug #77329 (Buffer Overflow via overly long Error Messages).
    • Fixed bug #77494 (Disabling class causes segfault on member access).
    • Fixed bug #77498 (Custom extension Segmentation fault when declare static property).
    • Fixed bug #77530 (PHP crashes when parsing `(2)::class`).
    • Fixed bug #77546 (iptcembed broken function).
    • Fixed bug #77630 (rename() across the device may allow unwanted access during processing).
    com
    • Fixed bug #77621 (Already defined constants are not properly reported).
    • Fixed bug #77626 (Persistence confusion in php_com_import_typelib()).
    exif
    • Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
    • Fixed bug #77540 (Invalid Read on exif_process_SOFn).
    • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
    • Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
    mbstring
    • Fixed bug #77514 (mb_ereg_replace() with trailing backslash adds null byte).
    • MySQL
    • Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.
    openssl
    • Fixed bug #77390 (feof might hang on TLS streams in case of fragmented TLS records).
    pdo_oci
    • Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.
    phar
    • Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
    • Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).
    phpdbg
    • Fixed bug #76596 (phpdbg support for display_errors=stderr).
    spl
    • Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).
    • Fixed bug #77431 (openFile() silently truncates after a null byte).
    standard
    • Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
    • Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of its options filled).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top