PHP Release 8.1.27


    PHP 8.1.27 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.1.27. This is a bug fix release.

    All PHP 8.1 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.1.27 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.1.27 (tar.gz)
    SHA256: 9aa5d7a29389d799885d90740932697006d5d0f55d1def67678e0c14f6ab7b2d
    PHP 8.1.27 (tar.bz2)
    SHA256: a15fd73ea44f2df30b07d24786e07d1948b0ea3eed0b8b845735d500dc28bff1
    PHP 8.1.27 (tar.xz)
    SHA256: 479e65c3f05714d4aace1370e617d78e49e996ec7a7579a5be47535be61f0658
    Change Logs
    core
    • Fixed oss-fuzz #54325 (Use-after-free of name in var-var with malicious error handler).
    • Fixed oss-fuzz #64209 (In-place modification of filename in php_message_handler_for_zend).
    • Fixed bug GH-12758 / GH-12768 (Invalid opline in OOM handlers within ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC).
    dom
    • Fixed bug GH-12616 (DOM: Removing XMLNS namespace node results in invalid default: prefix).
    fpm
    • Fixed bug GH-12705 (Segmentation fault in fpm_status_export_to_zval).
    intl
    • Fixed bug GH-12635 (Test bug69398.phpt fails with ICU 74.1).
    libxml
    • Fixed bug GH-12702 (libxml2 2.12.0 issue building from src).
    mysqlnd
    • Avoid using uninitialised struct.
    openssl
    • Fixed bug #50713 (openssl_pkcs7_verify() may ignore untrusted CAs).
    pcre
    • Fixed bug GH-12628 (The gh11374 test fails on Alpinelinux).
    pgsql
    • Fixed bug GH-12763 wrong argument type for pg_untrace.
    phpdbg
    • Fixed bug GH-12675 (MEMORY_LEAK in phpdbg_prompt.c).
    sqlite3
    • Fixed bug GH-12633 (sqlite3_defensive.phpt fails with sqlite 3.44.0).
    standard
    • Fix memory leak in syslog device handling.
    • Fixed bug GH-12621 (browscap segmentation fault when configured in the vhost).
    • Fixed bug GH-12655 (proc_open() does not take into account references in the descriptor array).
    streams
    • Fixed bug #79945 (Stream wrappers in imagecreatefrompng causes segfault).
    zip
    • Fixed bug GH-12661 (Inconsistency in ZipArchive::addGlob remove_path Option Behavior).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top