PHP Release 8.1.14


PHP 8.1.14 Release Announcement

The PHP development team announces the immediate availability of PHP 8.1.14. This is a security release.

All PHP 8.1 users are encouraged to upgrade to this version.

For source downloads of PHP 8.1.14 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 8.1.14 (tar.gz)
SHA256: 4755af2563ad187ceaf4a3632359c55e3f3be4050e0299e0f713bbb5e0531965
PHP 8.1.14 (tar.bz2)
SHA256: 14ca99333dd604a504a2368946485ac35d379c4da96d28dc515d7eb502dffa32
PHP 8.1.14 (tar.xz)
SHA256: e16e47a872d58685913ac848ce92ec49f42c1828110c98c65fb6265a08724a1a
Change Logs
core
  • Fixed bug GH-9905 (constant() behaves inconsistent when class is undefined).
  • Fixed bug GH-9918 (License information for xxHash is not included in README.REDIST.BINS file).
  • Fixed bug GH-9650 (Can't initialize heap: [0x000001e7]).
  • Fixed potentially undefined behavior in Windows ftok(3) emulation.
date
  • Fixed bug GH-9699 (DateTimeImmutable::diff differences in 8.1.10 onwards - timezone related).
  • Fixed bug GH-9700 (DateTime::createFromFormat: Parsing TZID string is too greedy).
  • Fixed bug GH-9866 (Time zone bug with \DateTimeInterface::diff()).
  • Fixed bug GH-9880 (DateTime diff returns wrong sign on day count when using a timezone).
fpm
  • Fixed bug GH-9959 (Solaris port event mechanism is still broken after bug #66694).
  • Fixed bug #68207 (Setting fastcgi.error_header can result in a WARNING).
  • Fixed bug GH-8517 (Random crash of FPM master process in fpm_stdio_child_said).
mbstring
  • Fixed bug GH-9535 (The behavior of mb_strcut in mbstring has been changed in PHP8.1).
opcache
  • Fixed bug GH-9968 (Segmentation Fault during OPCache Preload).
openssl
  • Fixed bug GH-9064 (PHP fails to build if openssl was built with --no-ec).
  • Fixed bug GH-10000 (OpenSSL test failures when OpenSSL compiled with no-dsa).
pcntl
  • Fixed bug GH-9298 (Signal handler called after rshutdown leads to crash).
pdo_firebird
  • Fixed bug GH-9971 (Incorrect NUMERIC value returned from PDO_Firebird).
pdo/sqlite
  • Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
session
  • Fixed GH-9932 (session name silently fails with . and [).
spl
  • Fixed GH-9883 (SplFileObject::__toString() reads next line).
  • Fixed GH-10011 (Trampoline autoloader will get reregistered and cannot be unregistered).
sqlite3
  • Fixed bug #81742 (open_basedir bypass in SQLite3 by using file URI).
To Top