PHP Release 8.1.22


    PHP 8.1.22 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.1.22. This is a security release.

    All PHP 8.1 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.1.22 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.1.22 (tar.gz)
    SHA256: f5140e94b139b4adec4b29c337537b7b6f1ef023197eb32be909e724e3da157a
    PHP 8.1.22 (tar.bz2)
    SHA256: 992354e382c6c618d01ed4be06beea8dec3178b14153df64d3c8c48b85e9fbc2
    PHP 8.1.22 (tar.xz)
    SHA256: 9ea4f4cfe775cb5866c057323d6b320f3a6e0adb1be41a068ff7bfec6f83e71d
    Change Logs
    build
    • Fixed bug GH-11522 (PHP version check fails with '-' separator).
    cli
    • Fix interrupted CLI output causing the process to exit.
    core
    • Fixed oss-fuzz #60011 (Mis-compilation of by-reference nullsafe operator).
    • Fixed use-of-uninitialized-value with ??= on assert.
    • Fixed build for FreeBSD before the 11.0 releases.
    curl
    • Fix crash when an invalid callback function is passed to CURLMOPT_PUSHFUNCTION.
    date
    • Fixed bug GH-11368 (Date modify returns invalid datetime).
    dom
    • Fixed bug GH-11625 (DOMElement::replaceWith() doesn't replace node with DOMDocumentFragment but just deletes node or causes wrapping <></> depending on libxml2 version).
    fileinfo
    • Fixed bug GH-11298 (finfo returns wrong mime type for xz files).
    ftp
    • Fix context option check for "overwrite".
    • Fixed bug GH-10562 (Memory leak and invalid state with consecutive ftp_nb_fget).
    gd
    • Fix most of the external libgd test failures.
    hash
    • Fix use-of-uninitialized-value in hash_pbkdf2(), fix missing $options parameter in signature.
    intl
    • Fix memory leak in MessageFormatter::format() on failure.
    libxml
    • Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading in XML without enabling it). (CVE-2023-3823)
    mbstring
    • Fix GH-11300 (license issue: restricted unicode license headers).
    opcache
    • Fixed bug GH-10914 (OPCache with Enum and Callback functions results in segmentation fault).
    • Prevent potential deadlock if accelerated globals cannot be allocated.
    pcntl
    • Fixed bug GH-11498 (SIGCHLD is not always returned from proc_open).
    pcre
    • Mangle PCRE regex cache key with JIT option.
    pdo
    • Fix GH-11587 (After php8.1, when PDO::ATTR_EMULATE_PREPARES is true and PDO::ATTR_STRINGIFY_FETCHES is true, decimal zeros are no longer filled).
    pdo sqlite
    • Fix GH-11492 (Make test failure: ext/pdo_sqlite/tests/bug_42589.phpt).
    phar
    • Add missing check on EVP_VerifyUpdate() in phar util.
    • Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()). (CVE-2023-3824)
    phpdbg
    • Fixed bug GH-9669 (phpdbg -h options doesn't list the -z option).
    session
    • Removed broken url support for transferring session ID.
    standard
    • Fix serialization of RC1 objects appearing in object graph twice.
    sqlite3
    • Fix replaced error handling in SQLite3Stmt::__construct.
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top