SUSE-SU-2025:02474-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2025/suse-su-202502474-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:02474-1
Upstream
Related
Published
2025-07-23T12:03:54Z
Modified
2026-03-11T07:30:02.816011Z
Summary
Security update for php8
Details

This update for php8 fixes the following issues:

Version update to 8.2.29:

  • CVE-2025-1220: Fixed null byte termination in hostnames (bsc#1246167)
  • CVE-2025-1735: Fixed pgsql extension does not check for errors during escaping (bsc#1246146)
  • CVE-2025-6491: Fixed NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (bsc#1246148)
References

Affected packages

openSUSE:Leap 15.6
apache2-mod_php8

Package

Name
apache2-mod_php8
Purl
pkg:rpm/opensuse/apache2-mod_php8&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-ffi": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1",
            "php8-fpm-apache": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8

Package

Name
php8
Purl
pkg:rpm/opensuse/php8&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-ffi": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1",
            "php8-fpm-apache": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-embed

Package

Name
php8-embed
Purl
pkg:rpm/opensuse/php8-embed&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-ffi": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1",
            "php8-fpm-apache": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-fastcgi

Package

Name
php8-fastcgi
Purl
pkg:rpm/opensuse/php8-fastcgi&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-ffi": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1",
            "php8-fpm-apache": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-fpm

Package

Name
php8-fpm
Purl
pkg:rpm/opensuse/php8-fpm&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-ffi": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1",
            "php8-fpm-apache": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-test

Package

Name
php8-test
Purl
pkg:rpm/opensuse/php8-test&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.2

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-ffi": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1",
            "php8-fpm-apache": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
SUSE:Linux Enterprise Module for Web and Scripting 15 SP6
apache2-mod_php8

Package

Name
apache2-mod_php8
Purl
pkg:rpm/suse/apache2-mod_php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8

Package

Name
php8
Purl
pkg:rpm/suse/php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-embed

Package

Name
php8-embed
Purl
pkg:rpm/suse/php8-embed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-fastcgi

Package

Name
php8-fastcgi
Purl
pkg:rpm/suse/php8-fastcgi&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-fpm

Package

Name
php8-fpm
Purl
pkg:rpm/suse/php8-fpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"
php8-test

Package

Name
php8-test
Purl
pkg:rpm/suse/php8-test&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.29-150600.3.19.2

Ecosystem specific 

{
    "binaries": [
        {
            "php8-dba": "8.2.29-150600.3.19.1",
            "apache2-mod_php8": "8.2.29-150600.3.19.1",
            "php8-gd": "8.2.29-150600.3.19.1",
            "php8-openssl": "8.2.29-150600.3.19.1",
            "php8-gmp": "8.2.29-150600.3.19.1",
            "php8-fpm": "8.2.29-150600.3.19.1",
            "php8-fileinfo": "8.2.29-150600.3.19.1",
            "php8-ftp": "8.2.29-150600.3.19.1",
            "php8-dom": "8.2.29-150600.3.19.1",
            "php8-readline": "8.2.29-150600.3.19.1",
            "php8-pcntl": "8.2.29-150600.3.19.1",
            "php8-snmp": "8.2.29-150600.3.19.1",
            "php8-sodium": "8.2.29-150600.3.19.1",
            "php8-sysvmsg": "8.2.29-150600.3.19.1",
            "php8-odbc": "8.2.29-150600.3.19.1",
            "php8-ldap": "8.2.29-150600.3.19.1",
            "php8-calendar": "8.2.29-150600.3.19.1",
            "php8-phar": "8.2.29-150600.3.19.1",
            "php8-posix": "8.2.29-150600.3.19.1",
            "php8-tidy": "8.2.29-150600.3.19.1",
            "php8-bcmath": "8.2.29-150600.3.19.1",
            "php8-test": "8.2.29-150600.3.19.2",
            "php8-cli": "8.2.29-150600.3.19.1",
            "php8-mysql": "8.2.29-150600.3.19.1",
            "php8-devel": "8.2.29-150600.3.19.1",
            "php8-mbstring": "8.2.29-150600.3.19.1",
            "php8-soap": "8.2.29-150600.3.19.1",
            "php8-ctype": "8.2.29-150600.3.19.1",
            "php8-xmlwriter": "8.2.29-150600.3.19.1",
            "php8-tokenizer": "8.2.29-150600.3.19.1",
            "php8-curl": "8.2.29-150600.3.19.1",
            "php8-xmlreader": "8.2.29-150600.3.19.1",
            "php8-shmop": "8.2.29-150600.3.19.1",
            "php8": "8.2.29-150600.3.19.1",
            "php8-xsl": "8.2.29-150600.3.19.1",
            "php8-sysvsem": "8.2.29-150600.3.19.1",
            "php8-intl": "8.2.29-150600.3.19.1",
            "php8-bz2": "8.2.29-150600.3.19.1",
            "php8-sqlite": "8.2.29-150600.3.19.1",
            "php8-enchant": "8.2.29-150600.3.19.1",
            "php8-exif": "8.2.29-150600.3.19.1",
            "php8-iconv": "8.2.29-150600.3.19.1",
            "php8-gettext": "8.2.29-150600.3.19.1",
            "php8-opcache": "8.2.29-150600.3.19.1",
            "php8-zlib": "8.2.29-150600.3.19.1",
            "php8-zip": "8.2.29-150600.3.19.1",
            "php8-sockets": "8.2.29-150600.3.19.1",
            "php8-sysvshm": "8.2.29-150600.3.19.1",
            "php8-pdo": "8.2.29-150600.3.19.1",
            "php8-pgsql": "8.2.29-150600.3.19.1",
            "php8-embed": "8.2.29-150600.3.19.1",
            "php8-fastcgi": "8.2.29-150600.3.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02474-1.json"