Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Security-Fixes Only
PHP 8.1 is currently only receiving security fixes, and scheduled to reach EOL on 2025-12-31
Downloads
Source Code
Git Clone
Use Git to clone the 8.1.34 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.1.34How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf), configuring the build ./configure, and running make.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.1.34-x64NTS.zip
Size: 29.39 MiB SHA256:
9cfe246cb144076c16f5913a3ef88a474c3dd7e60f0f0c8bb95faf68674016cc php-8.1.34-x86NTS.zip
Size: 26.44 MiB SHA256:
925f3b6b098cfc4b324056b8b8b8b870ad11cd22c15c2c29a03067a5eb14dc4c Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.1.34-x64TS.zip
Size: 29.5 MiB SHA256:
8e17e0804fe48d3a032c9bef16f0f922996e0b1b237061b7ce94485394db5d1b php-8.1.34-x86TS.zip
Size: 26.42 MiB SHA256:
f81e25dac62f0d32b10d77ddb3d9c2f52da4092608ece1181ab855fc97c2628e Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.1.34-cli-alpineDebian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.1.34-cliPHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.1.34-fpm-alpineDebian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.1.34-apacheDebian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.1.34-fpmChangeLog
Curl
- Fix curl build and test failures with version 8.16.
Opcache
- Reset global pointers to prevent use-after-free in
zend_jit_status().
PDO
- Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180)
Standard
- Fixed GHSA-www2-q4fc-65wf (Null byte termination in
dns_get_record()). - Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in
array_merge()). (CVE-2025-14178) - Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177)
Commit List
Arnaud Le Blanc
- Add unique entry point for extra tests in b633720585
- Upgrade Alpine in nightly job in 66708de841
Ben Ramsey
- Update versions for PHP 8.1.34 in 94abff7445
Dmitry Stogov
- Disable inlining and inter-procedure-analyses for
zend_string_equal_val()function that may be overriden for valgrind in GH-13099
Florian Engelhardt
- Reset global pointers to prevent use-after-free in 3aaa8d3526
George Wang
- fix pipe detection for STDERR in a757f276f9
Ilija Tovilo
- Disable JIT on Apple Silicon + ZTS in b6660634b4
- Upgrade to macOS 14 and backport necessary changes in e9e432a35d
- COMMUNTIY build grouping adjustments in a63e97667e
- Fix ERROR_CODE handling in COMMUNITY build in 2cd9233e42
- Fix curl 8.16.0 compilation with zts in da75e41a6f
- Fix more curl 8.16 issues in b810a23587
- Create separate workflow for nightly slack notification in 90bc40ecc0
- Suppress libxml deprecations in f7fb13eb07
- Update clang in macOS build in cb413b5d5f
- Fix xcode-select in 6cdb8bf0a2
Jakub Zelenka
- Revert "fix pipe detection for STDERR." in c0f8bb6622
- Fix
curl_setopt_ssltest for curl 8.16 in 36859ad977 - Update NEWS with info about curl 8.16 compat fixes in 742b7d8e55
- Fix GHSA-8xr5-qppj-gvwj: PDO quoting result null deref in 727a4ddc39
- Update NEWS with info about security issues in c48a9f42d3
Max Kellermann
- sapi/fpm: remove use of variable-length arrays in GH-10645
Michael Orlitzky
- ext/pcre/tests: support libpcre2-10.47 in bdf62b55bb
Niels Dossche
- Fix test conflict between chmod_variation2 and file_variation5 in 605ee05491
- Run FreebSD CI under 13.5 in be88192594
- Fix curl build failure on macOS+curl 8.16 in 1c8363d2bf
- Update zlib test to use separate file for
flock()in c3d6bf65d5 - dom: Fix compile warning due to misplaced const cast in bd67ba66a8
- Fix deprecation warning for libxml SAX header in GH-18594
- xml: Backport more deprecation fixes in dd2179433c
- dom: Backport test for libxml changes in 688902d455
- intl: Fix tests for icu update in 2b04e0831a
- Make
bug70417.phptless flaky in 2bf2411976 - Fix GH-20584: Information Leak of Memory in c5f28c7cf0
- Fix GHSA-h96m-rvf9-jgm2 in 8b801151bd
- Fix GHSA-www2-q4fc-65wf in ed70b1ea43
Shivam Mathur
- Fix master branch check in find-target-branch.bat in GH-19385
- Change master branch check to 8.6 in 107075605d
- Skip
lc_ctype_inheritance.phpton macos 15+ in 2f2fb1fbf1
Tim Düsterhus
ext/xml: Suppress libxml deprecation for_xmlParserCtxt.inStatein GH-19131- Update GitHub Action workflows to
actions/checkout@v5in 2650248a92 - github: Bust the nightly CI cache on Sunday instead of Monday in GH-20242