SUSE-SU-2026:20146-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-202620146-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:20146-1
Upstream
Related
Published
2026-01-26T12:36:41Z
Modified
2026-03-11T07:31:44.251410Z
Summary
Security update for php8
Details

This update for php8 fixes the following issues:

Version update to 8.4.16:

Security fixes:

  • CVE-2025-14177: getimagesize() function may leak uninitialized heap memory into the APPn segments when reading images in multi-chunk mode (bsc#1255710).
  • CVE-2025-14178: heap buffer overflow occurs in arraymerge() when the total element count of packed arrays exceeds 32-bit limits or HTMAX_SIZE (bsc#1255711).
  • CVE-2025-14180: null pointer dereference in pdoparseparams() function when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled (bsc#1255712).

Other fixes:

  • php8 contains Directories owned by wwwrun but does not require User. (bsc#1255043)
References

Affected packages

SUSE:Linux Enterprise Server 16.0
apache2-mod_php8

Package

Name
apache2-mod_php8
Purl
pkg:rpm/suse/apache2-mod_php8&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8

Package

Name
php8
Purl
pkg:rpm/suse/php8&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8-embed

Package

Name
php8-embed
Purl
pkg:rpm/suse/php8-embed&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8-fastcgi

Package

Name
php8-fastcgi
Purl
pkg:rpm/suse/php8-fastcgi&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8-fpm

Package

Name
php8-fpm
Purl
pkg:rpm/suse/php8-fpm&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
SUSE:Linux Enterprise Server for SAP applications 16.0
apache2-mod_php8

Package

Name
apache2-mod_php8
Purl
pkg:rpm/suse/apache2-mod_php8&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8

Package

Name
php8
Purl
pkg:rpm/suse/php8&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8-embed

Package

Name
php8-embed
Purl
pkg:rpm/suse/php8-embed&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8-fastcgi

Package

Name
php8-fastcgi
Purl
pkg:rpm/suse/php8-fastcgi&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"
php8-fpm

Package

Name
php8-fpm
Purl
pkg:rpm/suse/php8-fpm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.16-160000.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "php8-sysvmsg": "8.4.16-160000.1.1",
            "php8-curl": "8.4.16-160000.1.1",
            "php8-gettext": "8.4.16-160000.1.1",
            "php8-zip": "8.4.16-160000.1.1",
            "php8-dom": "8.4.16-160000.1.1",
            "php8": "8.4.16-160000.1.1",
            "php8-embed": "8.4.16-160000.1.1",
            "php8-sysvsem": "8.4.16-160000.1.1",
            "php8-devel": "8.4.16-160000.1.1",
            "php8-ctype": "8.4.16-160000.1.1",
            "php8-mbstring": "8.4.16-160000.1.1",
            "php8-opcache": "8.4.16-160000.1.1",
            "php8-intl": "8.4.16-160000.1.1",
            "php8-shmop": "8.4.16-160000.1.1",
            "php8-cli": "8.4.16-160000.1.1",
            "php8-ldap": "8.4.16-160000.1.1",
            "php8-gd": "8.4.16-160000.1.1",
            "php8-dba": "8.4.16-160000.1.1",
            "php8-sysvshm": "8.4.16-160000.1.1",
            "php8-tidy": "8.4.16-160000.1.1",
            "php8-pcntl": "8.4.16-160000.1.1",
            "php8-snmp": "8.4.16-160000.1.1",
            "php8-bcmath": "8.4.16-160000.1.1",
            "php8-fpm": "8.4.16-160000.1.1",
            "php8-pgsql": "8.4.16-160000.1.1",
            "php8-sqlite": "8.4.16-160000.1.1",
            "php8-ftp": "8.4.16-160000.1.1",
            "php8-odbc": "8.4.16-160000.1.1",
            "php8-calendar": "8.4.16-160000.1.1",
            "php8-pdo": "8.4.16-160000.1.1",
            "php8-xsl": "8.4.16-160000.1.1",
            "php8-bz2": "8.4.16-160000.1.1",
            "php8-posix": "8.4.16-160000.1.1",
            "php8-iconv": "8.4.16-160000.1.1",
            "php8-phar": "8.4.16-160000.1.1",
            "php8-fileinfo": "8.4.16-160000.1.1",
            "php8-xmlwriter": "8.4.16-160000.1.1",
            "php8-soap": "8.4.16-160000.1.1",
            "php8-enchant": "8.4.16-160000.1.1",
            "php8-fastcgi": "8.4.16-160000.1.1",
            "php8-tokenizer": "8.4.16-160000.1.1",
            "php8-ffi": "8.4.16-160000.1.1",
            "php8-xmlreader": "8.4.16-160000.1.1",
            "php8-sockets": "8.4.16-160000.1.1",
            "php8-gmp": "8.4.16-160000.1.1",
            "php8-sodium": "8.4.16-160000.1.1",
            "apache2-mod_php8": "8.4.16-160000.1.1",
            "php8-exif": "8.4.16-160000.1.1",
            "php8-mysql": "8.4.16-160000.1.1",
            "php8-zlib": "8.4.16-160000.1.1",
            "php8-openssl": "8.4.16-160000.1.1",
            "php8-fpm-apache": "8.4.16-160000.1.1",
            "php8-readline": "8.4.16-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20146-1.json"