PHP Release 8.1.16


    PHP 8.1.16 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.1.16. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662.

    All PHP 8.1 users are advised to upgrade to this version.

    For source downloads of PHP 8.1.16 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.1.16 (tar.gz)
    SHA256: a929fb9ed3bc364a5dea4f64954e8aaaa3408b87df04d7c6f743a190f5594e84
    PHP 8.1.16 (tar.bz2)
    SHA256: cd9f0ea14d82d9455587a49a0b6c802a7b8d8ff79703f9f48b17db010fb633ce
    PHP 8.1.16 (tar.xz)
    SHA256: d61f13d96a58b93c39672b58f25e1ee4ce88500f4acb1430cb01a514875c1258
    Change Logs
    core
    • Fixed bug #81744 (Password_verify() always return true with some hash). (CVE-2023-0567).
    • Fixed bug #81746 (1-byte array overrun in common path resolve code). (CVE-2023-0568).
    sapi
    • Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top