Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.1 » 8.1.34 »

PHP 8.1.8

PHP 8.1 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 8.1 is 8.1.34 which includes important security patches.

Source Code

  • PHP 8.1.8 (tar.gz)

    • sha256: 889d910558d2492f7f2236921b9bcde620674c8b684ec02d126060f8ca45dc8d

  • PHP 8.1.8 (tar.bz2)

    • sha256: b8815a5a02431453d4261e3598bd1f28516e4c0354f328c12890f257870e4c01

  • PHP 8.1.8 (tar.xz)

    • sha256: 04c065515bc347bc68e0bb1ac7182669a98a731e4a17727e5731650ad3d8de4c

Change Log

  • core

    • Fixed bug GH-8338 (Intel CET is disabled unintentionally).
      Chen
      Hu
    • Fixed leak in Enum::from/tryFrom for internal enums when using JIT (ilutov)
    • Fixed calling internal methods with a static return type from extension code.
      Sara
    • Fixed bug GH-8655 (Casting an object to array does not unwrap refcount=1 references).
      Nicolas Grekas
    • Fixed potential use after free in php_binary_init().
      Heiko Weber
    • Fixed bug GH-7942 (Indirect mutation of readonly properties through references).
      ilutov

  • cli

    • Fixed GH-8827 (Intentionally closing std handles no longer possible).
      cmb

  • com

    • Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
      cmb

  • curl

    • Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
      Pierrick

  • date

    • Fixed bug #72963 (Null-byte injection in CreateFromFormat and related functions).
      Derick
    • Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
      Derick
    • Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
      Derick
    • Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
      Derick

  • fileinfo

    • Fixed bug #81723 (Heap buffer overflow in finfo_buffer). (CVE-2022-31627)
      cmb

  • fpm

    • Fixed bug #67764 (fpm: syslog.ident don't work).
      Jakub Zelenka

  • gd

    • Fixed imagecreatefromavif() memory leak.
      cmb

  • mbstring

    • mb_detect_encoding recognizes all letters in Czech alphabet (alexdowad)
    • mb_detect_encoding recognizes all letters in Hungarian alphabet (alexdowad)
    • Fixed bug GH-8685 (pcre not ready at mbstring startup).
      Remi
    • Backwards-compatible mappings for 0x5C/0x7E in Shift-JIS are restored, after they had been changed in 8.1.0.
      Alex Dowad

  • odbc

    • Fixed handling of single-key connection strings.
      Calvin Buckley

  • opcache

    • Fixed bug GH-8591 (tracing JIT crash after private instance method change).
      Arnaud
      Dmitry
      Oleg Stepanischev

  • openssl

    • Fixed bug #50293 (Several openssl functions ignore the VCWD).
      Jakub Zelenka
      cmb
    • Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
      Jakub Zelenka

  • pdo_odbc

    • Fixed handling of single-key connection strings.
      Calvin Buckley

  • zip

    • Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
      Remi

PHP 8.1


  Represents a security release