The PHP development team announces the immediate availability of PHP 7.3.20. This is a security release impacting the official Windows builds of PHP. For Windows users running an official build, this release contains a patched version of libcurl addressing CVE-2020-8159. For all other consumers of PHP, this is a bug fix release. All PHP 7.3 users are encouraged to upgrade to this version. For source downloads of PHP 7.3.20 please visit our downloads page. Windows binaries can be found on the PHP for Windows site. The list of changes is recorded in the ChangeLog. Release Announcement: <https://php.net/releases/7_3_20.php> Downloads: <https://www.php.net/downloads> Windows downloads: <https://windows.php.net/download> Changelog: <https://www.php.net/ChangeLog-7.php#7.3.20> cURL sec advisory: <<https://curl.haxx.se/docs/CVE-2020-8169.html> Many thanks to all the contributors and supporters! Stanislav Malyshev, Christoph M. Becker php-7.3.20.tar.bz2 SHA256 hash: c6ed7894911acfe075381c01b07745d92e9259fac510a849f742edb6b95c89de PGP signature: -----BEGIN PGP SIGNATURE----- iQJABAABCAAqFiEEy69p8XOg/qS1N/Rw1myVkxGLzLYFAl8EK/oMHGNtYkBwaHAu bmV0AAoJENZslZMRi8y2S4YP/i9GiSHcvrhl0QGag8+fyT/HSdn09Z6n19on5NMB XjjhttphYVo2B8qoHxXCGT8zQ/Tb21U7lkTs8gYSCFJtES0QAk8JnApMmBTftLuX uczF29JX5xbL1uLRpAQ7nXUpNFULANz223xfJDx+lgyV3r1m3J+djSkj/eueV32X 1vivMeLoEtVxGtNJoGpL8FBUz2ryDuGuC8wMZA5mgwSVwfcyEyOfn/PKTKzK+Rsu /fAIwdWJyL1mM4vrsscW3f7acpGN19vgSqy/iMAok7bA1NeGYWhN80dbXA4Ms91M 3t0RtQIPwlhGYQO5SnxGFX8Oh0EJetoOihRq5r6BxgCJbCaiZcNSaCG/xa7ontuy yqFOHFarAUXJUH+EJl1V2NQ742qNY2NHoIIXdpZBa7iQGHnHW/wIVgQpIfAVy7/d R6qIjgM/V6m1a7l8byvrS5ih5c1YKuxgGde9926oA029P6cEeMWS9PtWQ7bNyEJI DlDwev5MHrOwBg27xTVteWWJXY563NtW7w+VoOVjYU3R3LMCru0M3dAOGZzakL/S uGogbed7+frdlUh9w89E4owF3nA7gEBpynTrennEUAzQSN7EEi2L3CtvpLrMspW+ kL/BzSNu9J3o2c0mt5YC7sE8phuGho7PLP/RtnJsJpabhmxITSF2SfEEnb9MRkCG fVKZ =Xgc8 -----END PGP SIGNATURE----- php-7.3.20.tar.gz SHA256 hash: d0579b8a6bcdd5e1ae334d83261f2389b0d3d4fd54cc808e20a5031121f97d87 PGP signature: -----BEGIN PGP SIGNATURE----- iQJABAABCAAqFiEEy69p8XOg/qS1N/Rw1myVkxGLzLYFAl8ELAkMHGNtYkBwaHAu bmV0AAoJENZslZMRi8y2/G0P/0MxN7hnN9r/rEr8AkHh5H8DrxE5Z1KidCYBuy/r +zKV1RT6GeQuR4gtJij1eOUDPLJtV02Dg7rIrH18GLqEwxH7eL6oBiC8bOePipWZ hPW8pn7okm5GoJzpVVicQq1Qc7SCVtBdd/XuQKt082ldgYnyxU1u3BNOA8FFh92G Aa4GRSCMXsKcTaUNMm5TZthylii4O61x1iHzY85r6L4sUy2SuQrw8w6FNaOtQmP6 6DYXAODdfsbvSNF8keqaayXz/RmN0zHTqivrb0TzdAVK0mAGcpF/ZQN5xquAuB66 dUNwrEG8LSys7/1Lcof4zC7RCmEhhwt3XEd9iJoFsx5YNhlPn/ny2crjDRL9Nt22 30O3I+7GUD5ZxhMaKSl0bhSfExYK/cyYyOq4FK2jF8NlcUDuClNM6sgUzPgLjprc B7hPiKe1iT45wCNfDq3rrmM7eYHrUKy13AAZDIB/ytGe89JiOiPpJKM9wfyPh+Mg xbaJaugA1GazIZp4iEQZDfRavj013Yh73yBRDCIvzuKis/+MQ3b2GYdS4Uu86kRj ntH+W3KffwaT7poK8dXwDXlTL5p0pJ+himzh2S5rGbDT0cgYVM6UOPov2AaiQUrf Mc4CYI6GB0gSgl/dzYQ/7bCvdP/tT5ul75TAT7N8U5Grz4SCHQbo4ZMmKyI/EiM/ ELLD =1DBT -----END PGP SIGNATURE----- php-7.3.20.tar.xz SHA256 hash: 43292046f6684eb13acb637276d4aa1dd9f66b0b7045e6f1493bc90db389b888 PGP signature: -----BEGIN PGP SIGNATURE----- iQJABAABCAAqFiEEy69p8XOg/qS1N/Rw1myVkxGLzLYFAl8ELAkMHGNtYkBwaHAu bmV0AAoJENZslZMRi8y240EP/2Ed4Fa6u+0kYDg0d0Tn0E9zjJTI3oIX64kvUnA9 368L0AzCpCEHMZoE36oeLHs+pmqm2Irz2FrjvwnmXlKbf7k9iZsgo/IZxTesetE4 wBmzGZCWEgEcpUTHav/scejEysD70GbzBo3wpIzIps3D+4wcMFXYSpygFiEtMGiM MqNnTn+Q/i8krNIGtuV20RnuGkzDedogUb99B1E0LjiuS9Lq/obFeWGWnNMsgYlv TEPxcMgqsglovXZd3Z2tdAqQ34A89gdOkK97oUDeBrLJfJabgFrCprMlOWiECkNs VuKKqiHSQOcPoebpKzwYh0rsLD3glIW7MXU1koyXFS2QTiLNsaUTv+8vxWnr6JNg 9nuZfD2OgI0gSLMbpjvTBLJFIUA43/Sp/iQAlA1sQJZXnOSi+xjkqgtNw8hnwURT lDrCnCqcBb0L11aDamBVE4E/2UVTg7bRRxFrMRnsQtr6SqXO/QBbhnpyHQLsnBd/ tcGDZw7uSTIoAoy6PpIWg70E5lDArZcHHJ51IXfCvTMPSx0IkzdNUg1VOeUzlHtX 1zR1Ms2Umr6EWvwC9krzow16iSty3pUfzs57qVBYAt5jS776qIvHmo+kIMcYQzki X4sn3IQntksLevOh+RNIuSWoLgtmNpCc8TMfhHEU2tapoLxgaNaHbxqNAv7cNqL0 /wRc =zju5 -----END PGP SIGNATURE-----