Home » Releases » 8.1 » 8.1.34 »

PHP 8.1.32

PHP 8.1 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 8.1 is 8.1.34 which includes important security patches.

Source Code

Change Log

  • libxml

    • Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
      nielsdos
    • Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
      timwolla
  • streams

    • Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
      Jakub Zelenka
    • Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
      Jakub Zelenka
    • Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
      Jakub Zelenka
    • Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
      Jakub Zelenka
  • windows

    • Fixed phpize for Windows 11 (24H2).
      bwoebi

PHP 8.1


  Represents a security release