The PHP development team announces the immediate availability of PHP 7.3.20. This is a security release impacting the official Windows builds of PHP.

For windows users running an official build, this release contains a patched version of libcurl addressing CVE-2020-8169.

For all other consumers of PHP, this is a bug fix release.

All PHP 7.3 users are encouraged to upgrade to this version.

For source downloads of PHP 7.3.20 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.