PHP Release 8.1.32


    PHP 8.1.32 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.1.32. This is a security release.

    All PHP 8.1 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.1.32 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.1.32 (tar.gz)
    SHA256: 4846836d1de27dbd28e89180f073531087029a77e98e8e019b7b2eddbdb1baff
    PHP 8.1.32 (tar.bz2)
    SHA256: a04fdd3df05f948df8a8f2c5d27ab54c1f43822c525f31fd20c19a282452d07c
    PHP 8.1.32 (tar.xz)
    SHA256: c582ac682a280bbc69bc2186c21eb7e3313cc73099be61a6bc1d2cd337cbf383
    Change Logs
    libxml
    streams
    • Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
    • Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
    • Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
    • Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
    windows
    • Fixed phpize for Windows 11 (24H2).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top