PHP Release 8.1.20


    PHP 8.1.20 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.1.20. This is a security release.

    All PHP 8.1 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.1.20 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.1.20 (tar.gz)
    SHA256: b7d3e2a0c5bed37bb39e4627550d0ee5a4a600042b83c63037b0f5f84793cbe6
    PHP 8.1.20 (tar.bz2)
    SHA256: 55578587514a2707500f85319e57c0d4df9b8803cdb26566595ac4bf459dc4dd
    PHP 8.1.20 (tar.xz)
    SHA256: 4c9973f599e93ed5e8ce2b45ce1d41bb8fb54ce642824fd23e56b52fd75029a6
    Change Logs
    core
    • Fixed bug GH-9068 (Conditional jump or move depends on uninitialised value(s)).
    • Fixed bug GH-11189 (Exceeding memory limit in zend_hash_do_resize leaves the array in an invalid state).
    • Fixed bug GH-11222 (foreach by-ref may jump over keys during a rehash).
    date
    • Fixed bug GH-11281 (DateTimeZone::getName() does not include seconds in offset).
    exif
    • Fixed bug GH-10834 (exif_read_data() cannot read smaller stream wrapper chunk sizes).
    fpm
    • Fixed bug GH-10461 (PHP-FPM segfault due to after free usage of child->ev_std(out|err)).
    • Fixed bug #64539 (FPM status page: query_string not properly JSON encoded).
    • Fixed memory leak for invalid primary script file handle.
    hash
    • Fixed bug GH-11180 (hash_file() appears to be restricted to 3 arguments).
    libxml
    • Fixed bug GH-11160 (Few tests failed building with new libxml 2.11.0).
    opcache
    • Fixed bug GH-11134 (Incorrect match default branch optimization).
    • Fixed too wide OR and AND range inference.
    • Fixed bug GH-11245 (In some specific cases SWITCH with one default statement will cause segfault).
    pgsql
    • Fixed parameter parsing of pg_lo_export().
    phar
    • Fixed bug GH-11099 (Generating phar.php during cross-compile can't be done).
    soap
    • Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP). (CVE-2023-3247)
    • Fixed bug GH-8426 (make test fail while soap extension build).
    spl
    • Fixed bug GH-11178 (Segmentation fault in spl_array_it_get_current_data (PHP 8.1.18)).
    standard
    • Fixed bug GH-11138 (move_uploaded_file() emits open_basedir warning for source file).
    • Fixed bug GH-11274 (POST/PATCH request switches to GET after a HTTP 308 redirect).
    streams
    • Fixed bug GH-10031 ([Stream] STREAM_NOTIFY_PROGRESS over HTTP emitted irregularly for last chunk of data).
    • Fixed bug GH-11175 (Stream Socket Timeout).
    • Fixed bug GH-11177 (ASAN UndefinedBehaviorSanitizer when timeout = -1 passed to stream_socket_accept/stream_socket_client).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top