Software 43445 Published by

PHP 8.1.33 addresses issues related to PGSQL, SOAP, and Standard, as outlined in GHSA-hrwm-9436-5mv3, GHSA-453j-q27h-5p8x, and GHSA-3cr5-j632-f35r, enhancing error checking during the escaping process.



php-8.1.33

- PGSQL:
. Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
escaping). (CVE-2025-1735) (Jakub Zelenka)

- SOAP:
. Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)

- Standard:
. Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
(CVE-2025-1220) (Jakub Zelenka)

Release php-8.1.33 Β· php/php-src