SUSE-SU-2024:4136-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2024/suse-su-20244136-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2024:4136-1
Upstream
CVE (5)
Related
CVE (5)
Published
2024-12-02T12:26:48Z
Modified
2026-02-04T04:36:23Z
Summary
Security update for php8
Details

This update for php8 fixes the following issues:

  • CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter (bsc#1233702).
  • CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs (bsc#1233703).
  • CVE-2024-8929: Leak partial content of the heap through heap buffer over-read (bsc#1233651).
References

Affected packages

openSUSE:Leap 15.6
apache2-mod_php8

Package

Name
apache2-mod_php8
Purl
pkg:rpm/opensuse/apache2-mod_php8&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-ffi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-fpm-apache":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8

Package

Name
php8
Purl
pkg:rpm/opensuse/php8&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-ffi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-fpm-apache":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-embed

Package

Name
php8-embed
Purl
pkg:rpm/opensuse/php8-embed&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-ffi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-fpm-apache":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-fastcgi

Package

Name
php8-fastcgi
Purl
pkg:rpm/opensuse/php8-fastcgi&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-ffi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-fpm-apache":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-fpm

Package

Name
php8-fpm
Purl
pkg:rpm/opensuse/php8-fpm&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-ffi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-fpm-apache":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-test

Package

Name
php8-test
Purl
pkg:rpm/opensuse/php8-test&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-ffi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-fpm-apache":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
SUSE:Linux Enterprise Module for Web and Scripting 15 SP6
apache2-mod_php8

Package

Name
apache2-mod_php8
Purl
pkg:rpm/suse/apache2-mod_php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8

Package

Name
php8
Purl
pkg:rpm/suse/php8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-embed

Package

Name
php8-embed
Purl
pkg:rpm/suse/php8-embed&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-fastcgi

Package

Name
php8-fastcgi
Purl
pkg:rpm/suse/php8-fastcgi&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-fpm

Package

Name
php8-fpm
Purl
pkg:rpm/suse/php8-fpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"
php8-test

Package

Name
php8-test
Purl
pkg:rpm/suse/php8-test&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2.26-150600.3.9.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache2-mod_php8":  "8.2.26-150600.3.9.1",
            "php8":  "8.2.26-150600.3.9.1",
            "php8-bcmath":  "8.2.26-150600.3.9.1",
            "php8-bz2":  "8.2.26-150600.3.9.1",
            "php8-calendar":  "8.2.26-150600.3.9.1",
            "php8-cli":  "8.2.26-150600.3.9.1",
            "php8-ctype":  "8.2.26-150600.3.9.1",
            "php8-curl":  "8.2.26-150600.3.9.1",
            "php8-dba":  "8.2.26-150600.3.9.1",
            "php8-devel":  "8.2.26-150600.3.9.1",
            "php8-dom":  "8.2.26-150600.3.9.1",
            "php8-embed":  "8.2.26-150600.3.9.1",
            "php8-enchant":  "8.2.26-150600.3.9.1",
            "php8-exif":  "8.2.26-150600.3.9.1",
            "php8-fastcgi":  "8.2.26-150600.3.9.1",
            "php8-fileinfo":  "8.2.26-150600.3.9.1",
            "php8-fpm":  "8.2.26-150600.3.9.1",
            "php8-ftp":  "8.2.26-150600.3.9.1",
            "php8-gd":  "8.2.26-150600.3.9.1",
            "php8-gettext":  "8.2.26-150600.3.9.1",
            "php8-gmp":  "8.2.26-150600.3.9.1",
            "php8-iconv":  "8.2.26-150600.3.9.1",
            "php8-intl":  "8.2.26-150600.3.9.1",
            "php8-ldap":  "8.2.26-150600.3.9.1",
            "php8-mbstring":  "8.2.26-150600.3.9.1",
            "php8-mysql":  "8.2.26-150600.3.9.1",
            "php8-odbc":  "8.2.26-150600.3.9.1",
            "php8-opcache":  "8.2.26-150600.3.9.1",
            "php8-openssl":  "8.2.26-150600.3.9.1",
            "php8-pcntl":  "8.2.26-150600.3.9.1",
            "php8-pdo":  "8.2.26-150600.3.9.1",
            "php8-pgsql":  "8.2.26-150600.3.9.1",
            "php8-phar":  "8.2.26-150600.3.9.1",
            "php8-posix":  "8.2.26-150600.3.9.1",
            "php8-readline":  "8.2.26-150600.3.9.1",
            "php8-shmop":  "8.2.26-150600.3.9.1",
            "php8-snmp":  "8.2.26-150600.3.9.1",
            "php8-soap":  "8.2.26-150600.3.9.1",
            "php8-sockets":  "8.2.26-150600.3.9.1",
            "php8-sodium":  "8.2.26-150600.3.9.1",
            "php8-sqlite":  "8.2.26-150600.3.9.1",
            "php8-sysvmsg":  "8.2.26-150600.3.9.1",
            "php8-sysvsem":  "8.2.26-150600.3.9.1",
            "php8-sysvshm":  "8.2.26-150600.3.9.1",
            "php8-test":  "8.2.26-150600.3.9.1",
            "php8-tidy":  "8.2.26-150600.3.9.1",
            "php8-tokenizer":  "8.2.26-150600.3.9.1",
            "php8-xmlreader":  "8.2.26-150600.3.9.1",
            "php8-xmlwriter":  "8.2.26-150600.3.9.1",
            "php8-xsl":  "8.2.26-150600.3.9.1",
            "php8-zip":  "8.2.26-150600.3.9.1",
            "php8-zlib":  "8.2.26-150600.3.9.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4136-1.json"