openSUSE-SU-2026:21532-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21532-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21532-1
- Upstream
- Related
- Published
- 2026-08-05T08:53:53Z
- Modified
- 2026-08-06T18:23:57Z
- Summary
- Security update for php8
- Details
-
This update for php8 fixes the following issues
- Update to version 8.4.24
- CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
- CVE-2026-9672: Upgrade libgd (bsc#1273078).
- CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
- CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
- References
-
- https://bugzilla.suse.com/1273075
- https://bugzilla.suse.com/1273076
- https://bugzilla.suse.com/1273077
- https://bugzilla.suse.com/1273078
- https://www.suse.com/security/cve/CVE-2026-17543
- https://www.suse.com/security/cve/CVE-2026-17544
- https://www.suse.com/security/cve/CVE-2026-7260
- https://www.suse.com/security/cve/CVE-2026-9672
Affected packages
openSUSE:Leap 16.0
apache2-mod_php8
Package
- Name
- apache2-mod_php8
- Purl
- pkg:rpm/opensuse/apache2-mod_php8&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.4.24-160000.1.1
Ecosystem specific
{
"binaries": [
{
"apache2-mod_php8": "8.4.24-160000.1.1",
"php8": "8.4.24-160000.1.1",
"php8-bcmath": "8.4.24-160000.1.1",
"php8-bz2": "8.4.24-160000.1.1",
"php8-calendar": "8.4.24-160000.1.1",
"php8-cli": "8.4.24-160000.1.1",
"php8-ctype": "8.4.24-160000.1.1",
"php8-curl": "8.4.24-160000.1.1",
"php8-dba": "8.4.24-160000.1.1",
"php8-devel": "8.4.24-160000.1.1",
"php8-dom": "8.4.24-160000.1.1",
"php8-embed": "8.4.24-160000.1.1",
"php8-enchant": "8.4.24-160000.1.1",
"php8-exif": "8.4.24-160000.1.1",
"php8-fastcgi": "8.4.24-160000.1.1",
"php8-ffi": "8.4.24-160000.1.1",
"php8-fileinfo": "8.4.24-160000.1.1",
"php8-fpm": "8.4.24-160000.1.1",
"php8-fpm-apache": "8.4.24-160000.1.1",
"php8-ftp": "8.4.24-160000.1.1",
"php8-gd": "8.4.24-160000.1.1",
"php8-gettext": "8.4.24-160000.1.1",
"php8-gmp": "8.4.24-160000.1.1",
"php8-iconv": "8.4.24-160000.1.1",
"php8-intl": "8.4.24-160000.1.1",
"php8-ldap": "8.4.24-160000.1.1",
"php8-mbstring": "8.4.24-160000.1.1",
"php8-mysql": "8.4.24-160000.1.1",
"php8-odbc": "8.4.24-160000.1.1",
"php8-opcache": "8.4.24-160000.1.1",
"php8-openssl": "8.4.24-160000.1.1",
"php8-pcntl": "8.4.24-160000.1.1",
"php8-pdo": "8.4.24-160000.1.1",
"php8-pgsql": "8.4.24-160000.1.1",
"php8-phar": "8.4.24-160000.1.1",
"php8-posix": "8.4.24-160000.1.1",
"php8-readline": "8.4.24-160000.1.1",
"php8-shmop": "8.4.24-160000.1.1",
"php8-snmp": "8.4.24-160000.1.1",
"php8-soap": "8.4.24-160000.1.1",
"php8-sockets": "8.4.24-160000.1.1",
"php8-sodium": "8.4.24-160000.1.1",
"php8-sqlite": "8.4.24-160000.1.1",
"php8-sysvmsg": "8.4.24-160000.1.1",
"php8-sysvsem": "8.4.24-160000.1.1",
"php8-sysvshm": "8.4.24-160000.1.1",
"php8-test": "8.4.24-160000.1.1",
"php8-tidy": "8.4.24-160000.1.1",
"php8-tokenizer": "8.4.24-160000.1.1",
"php8-xmlreader": "8.4.24-160000.1.1",
"php8-xmlwriter": "8.4.24-160000.1.1",
"php8-xsl": "8.4.24-160000.1.1",
"php8-zip": "8.4.24-160000.1.1",
"php8-zlib": "8.4.24-160000.1.1"
}
]
}php8
Package
- Name
- php8
- Purl
- pkg:rpm/opensuse/php8&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.4.24-160000.1.1
Ecosystem specific
{
"binaries": [
{
"apache2-mod_php8": "8.4.24-160000.1.1",
"php8": "8.4.24-160000.1.1",
"php8-bcmath": "8.4.24-160000.1.1",
"php8-bz2": "8.4.24-160000.1.1",
"php8-calendar": "8.4.24-160000.1.1",
"php8-cli": "8.4.24-160000.1.1",
"php8-ctype": "8.4.24-160000.1.1",
"php8-curl": "8.4.24-160000.1.1",
"php8-dba": "8.4.24-160000.1.1",
"php8-devel": "8.4.24-160000.1.1",
"php8-dom": "8.4.24-160000.1.1",
"php8-embed": "8.4.24-160000.1.1",
"php8-enchant": "8.4.24-160000.1.1",
"php8-exif": "8.4.24-160000.1.1",
"php8-fastcgi": "8.4.24-160000.1.1",
"php8-ffi": "8.4.24-160000.1.1",
"php8-fileinfo": "8.4.24-160000.1.1",
"php8-fpm": "8.4.24-160000.1.1",
"php8-fpm-apache": "8.4.24-160000.1.1",
"php8-ftp": "8.4.24-160000.1.1",
"php8-gd": "8.4.24-160000.1.1",
"php8-gettext": "8.4.24-160000.1.1",
"php8-gmp": "8.4.24-160000.1.1",
"php8-iconv": "8.4.24-160000.1.1",
"php8-intl": "8.4.24-160000.1.1",
"php8-ldap": "8.4.24-160000.1.1",
"php8-mbstring": "8.4.24-160000.1.1",
"php8-mysql": "8.4.24-160000.1.1",
"php8-odbc": "8.4.24-160000.1.1",
"php8-opcache": "8.4.24-160000.1.1",
"php8-openssl": "8.4.24-160000.1.1",
"php8-pcntl": "8.4.24-160000.1.1",
"php8-pdo": "8.4.24-160000.1.1",
"php8-pgsql": "8.4.24-160000.1.1",
"php8-phar": "8.4.24-160000.1.1",
"php8-posix": "8.4.24-160000.1.1",
"php8-readline": "8.4.24-160000.1.1",
"php8-shmop": "8.4.24-160000.1.1",
"php8-snmp": "8.4.24-160000.1.1",
"php8-soap": "8.4.24-160000.1.1",
"php8-sockets": "8.4.24-160000.1.1",
"php8-sodium": "8.4.24-160000.1.1",
"php8-sqlite": "8.4.24-160000.1.1",
"php8-sysvmsg": "8.4.24-160000.1.1",
"php8-sysvsem": "8.4.24-160000.1.1",
"php8-sysvshm": "8.4.24-160000.1.1",
"php8-test": "8.4.24-160000.1.1",
"php8-tidy": "8.4.24-160000.1.1",
"php8-tokenizer": "8.4.24-160000.1.1",
"php8-xmlreader": "8.4.24-160000.1.1",
"php8-xmlwriter": "8.4.24-160000.1.1",
"php8-xsl": "8.4.24-160000.1.1",
"php8-zip": "8.4.24-160000.1.1",
"php8-zlib": "8.4.24-160000.1.1"
}
]
}php8-embed
Package
- Name
- php8-embed
- Purl
- pkg:rpm/opensuse/php8-embed&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.4.24-160000.1.1
Ecosystem specific
{
"binaries": [
{
"apache2-mod_php8": "8.4.24-160000.1.1",
"php8": "8.4.24-160000.1.1",
"php8-bcmath": "8.4.24-160000.1.1",
"php8-bz2": "8.4.24-160000.1.1",
"php8-calendar": "8.4.24-160000.1.1",
"php8-cli": "8.4.24-160000.1.1",
"php8-ctype": "8.4.24-160000.1.1",
"php8-curl": "8.4.24-160000.1.1",
"php8-dba": "8.4.24-160000.1.1",
"php8-devel": "8.4.24-160000.1.1",
"php8-dom": "8.4.24-160000.1.1",
"php8-embed": "8.4.24-160000.1.1",
"php8-enchant": "8.4.24-160000.1.1",
"php8-exif": "8.4.24-160000.1.1",
"php8-fastcgi": "8.4.24-160000.1.1",
"php8-ffi": "8.4.24-160000.1.1",
"php8-fileinfo": "8.4.24-160000.1.1",
"php8-fpm": "8.4.24-160000.1.1",
"php8-fpm-apache": "8.4.24-160000.1.1",
"php8-ftp": "8.4.24-160000.1.1",
"php8-gd": "8.4.24-160000.1.1",
"php8-gettext": "8.4.24-160000.1.1",
"php8-gmp": "8.4.24-160000.1.1",
"php8-iconv": "8.4.24-160000.1.1",
"php8-intl": "8.4.24-160000.1.1",
"php8-ldap": "8.4.24-160000.1.1",
"php8-mbstring": "8.4.24-160000.1.1",
"php8-mysql": "8.4.24-160000.1.1",
"php8-odbc": "8.4.24-160000.1.1",
"php8-opcache": "8.4.24-160000.1.1",
"php8-openssl": "8.4.24-160000.1.1",
"php8-pcntl": "8.4.24-160000.1.1",
"php8-pdo": "8.4.24-160000.1.1",
"php8-pgsql": "8.4.24-160000.1.1",
"php8-phar": "8.4.24-160000.1.1",
"php8-posix": "8.4.24-160000.1.1",
"php8-readline": "8.4.24-160000.1.1",
"php8-shmop": "8.4.24-160000.1.1",
"php8-snmp": "8.4.24-160000.1.1",
"php8-soap": "8.4.24-160000.1.1",
"php8-sockets": "8.4.24-160000.1.1",
"php8-sodium": "8.4.24-160000.1.1",
"php8-sqlite": "8.4.24-160000.1.1",
"php8-sysvmsg": "8.4.24-160000.1.1",
"php8-sysvsem": "8.4.24-160000.1.1",
"php8-sysvshm": "8.4.24-160000.1.1",
"php8-test": "8.4.24-160000.1.1",
"php8-tidy": "8.4.24-160000.1.1",
"php8-tokenizer": "8.4.24-160000.1.1",
"php8-xmlreader": "8.4.24-160000.1.1",
"php8-xmlwriter": "8.4.24-160000.1.1",
"php8-xsl": "8.4.24-160000.1.1",
"php8-zip": "8.4.24-160000.1.1",
"php8-zlib": "8.4.24-160000.1.1"
}
]
}php8-fastcgi
Package
- Name
- php8-fastcgi
- Purl
- pkg:rpm/opensuse/php8-fastcgi&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.4.24-160000.1.1
Ecosystem specific
{
"binaries": [
{
"apache2-mod_php8": "8.4.24-160000.1.1",
"php8": "8.4.24-160000.1.1",
"php8-bcmath": "8.4.24-160000.1.1",
"php8-bz2": "8.4.24-160000.1.1",
"php8-calendar": "8.4.24-160000.1.1",
"php8-cli": "8.4.24-160000.1.1",
"php8-ctype": "8.4.24-160000.1.1",
"php8-curl": "8.4.24-160000.1.1",
"php8-dba": "8.4.24-160000.1.1",
"php8-devel": "8.4.24-160000.1.1",
"php8-dom": "8.4.24-160000.1.1",
"php8-embed": "8.4.24-160000.1.1",
"php8-enchant": "8.4.24-160000.1.1",
"php8-exif": "8.4.24-160000.1.1",
"php8-fastcgi": "8.4.24-160000.1.1",
"php8-ffi": "8.4.24-160000.1.1",
"php8-fileinfo": "8.4.24-160000.1.1",
"php8-fpm": "8.4.24-160000.1.1",
"php8-fpm-apache": "8.4.24-160000.1.1",
"php8-ftp": "8.4.24-160000.1.1",
"php8-gd": "8.4.24-160000.1.1",
"php8-gettext": "8.4.24-160000.1.1",
"php8-gmp": "8.4.24-160000.1.1",
"php8-iconv": "8.4.24-160000.1.1",
"php8-intl": "8.4.24-160000.1.1",
"php8-ldap": "8.4.24-160000.1.1",
"php8-mbstring": "8.4.24-160000.1.1",
"php8-mysql": "8.4.24-160000.1.1",
"php8-odbc": "8.4.24-160000.1.1",
"php8-opcache": "8.4.24-160000.1.1",
"php8-openssl": "8.4.24-160000.1.1",
"php8-pcntl": "8.4.24-160000.1.1",
"php8-pdo": "8.4.24-160000.1.1",
"php8-pgsql": "8.4.24-160000.1.1",
"php8-phar": "8.4.24-160000.1.1",
"php8-posix": "8.4.24-160000.1.1",
"php8-readline": "8.4.24-160000.1.1",
"php8-shmop": "8.4.24-160000.1.1",
"php8-snmp": "8.4.24-160000.1.1",
"php8-soap": "8.4.24-160000.1.1",
"php8-sockets": "8.4.24-160000.1.1",
"php8-sodium": "8.4.24-160000.1.1",
"php8-sqlite": "8.4.24-160000.1.1",
"php8-sysvmsg": "8.4.24-160000.1.1",
"php8-sysvsem": "8.4.24-160000.1.1",
"php8-sysvshm": "8.4.24-160000.1.1",
"php8-test": "8.4.24-160000.1.1",
"php8-tidy": "8.4.24-160000.1.1",
"php8-tokenizer": "8.4.24-160000.1.1",
"php8-xmlreader": "8.4.24-160000.1.1",
"php8-xmlwriter": "8.4.24-160000.1.1",
"php8-xsl": "8.4.24-160000.1.1",
"php8-zip": "8.4.24-160000.1.1",
"php8-zlib": "8.4.24-160000.1.1"
}
]
}php8-fpm
Package
- Name
- php8-fpm
- Purl
- pkg:rpm/opensuse/php8-fpm&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.4.24-160000.1.1
Ecosystem specific
{
"binaries": [
{
"apache2-mod_php8": "8.4.24-160000.1.1",
"php8": "8.4.24-160000.1.1",
"php8-bcmath": "8.4.24-160000.1.1",
"php8-bz2": "8.4.24-160000.1.1",
"php8-calendar": "8.4.24-160000.1.1",
"php8-cli": "8.4.24-160000.1.1",
"php8-ctype": "8.4.24-160000.1.1",
"php8-curl": "8.4.24-160000.1.1",
"php8-dba": "8.4.24-160000.1.1",
"php8-devel": "8.4.24-160000.1.1",
"php8-dom": "8.4.24-160000.1.1",
"php8-embed": "8.4.24-160000.1.1",
"php8-enchant": "8.4.24-160000.1.1",
"php8-exif": "8.4.24-160000.1.1",
"php8-fastcgi": "8.4.24-160000.1.1",
"php8-ffi": "8.4.24-160000.1.1",
"php8-fileinfo": "8.4.24-160000.1.1",
"php8-fpm": "8.4.24-160000.1.1",
"php8-fpm-apache": "8.4.24-160000.1.1",
"php8-ftp": "8.4.24-160000.1.1",
"php8-gd": "8.4.24-160000.1.1",
"php8-gettext": "8.4.24-160000.1.1",
"php8-gmp": "8.4.24-160000.1.1",
"php8-iconv": "8.4.24-160000.1.1",
"php8-intl": "8.4.24-160000.1.1",
"php8-ldap": "8.4.24-160000.1.1",
"php8-mbstring": "8.4.24-160000.1.1",
"php8-mysql": "8.4.24-160000.1.1",
"php8-odbc": "8.4.24-160000.1.1",
"php8-opcache": "8.4.24-160000.1.1",
"php8-openssl": "8.4.24-160000.1.1",
"php8-pcntl": "8.4.24-160000.1.1",
"php8-pdo": "8.4.24-160000.1.1",
"php8-pgsql": "8.4.24-160000.1.1",
"php8-phar": "8.4.24-160000.1.1",
"php8-posix": "8.4.24-160000.1.1",
"php8-readline": "8.4.24-160000.1.1",
"php8-shmop": "8.4.24-160000.1.1",
"php8-snmp": "8.4.24-160000.1.1",
"php8-soap": "8.4.24-160000.1.1",
"php8-sockets": "8.4.24-160000.1.1",
"php8-sodium": "8.4.24-160000.1.1",
"php8-sqlite": "8.4.24-160000.1.1",
"php8-sysvmsg": "8.4.24-160000.1.1",
"php8-sysvsem": "8.4.24-160000.1.1",
"php8-sysvshm": "8.4.24-160000.1.1",
"php8-test": "8.4.24-160000.1.1",
"php8-tidy": "8.4.24-160000.1.1",
"php8-tokenizer": "8.4.24-160000.1.1",
"php8-xmlreader": "8.4.24-160000.1.1",
"php8-xmlwriter": "8.4.24-160000.1.1",
"php8-xsl": "8.4.24-160000.1.1",
"php8-zip": "8.4.24-160000.1.1",
"php8-zlib": "8.4.24-160000.1.1"
}
]
}php8-test
Package
- Name
- php8-test
- Purl
- pkg:rpm/opensuse/php8-test&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.4.24-160000.1.1
Ecosystem specific
{
"binaries": [
{
"apache2-mod_php8": "8.4.24-160000.1.1",
"php8": "8.4.24-160000.1.1",
"php8-bcmath": "8.4.24-160000.1.1",
"php8-bz2": "8.4.24-160000.1.1",
"php8-calendar": "8.4.24-160000.1.1",
"php8-cli": "8.4.24-160000.1.1",
"php8-ctype": "8.4.24-160000.1.1",
"php8-curl": "8.4.24-160000.1.1",
"php8-dba": "8.4.24-160000.1.1",
"php8-devel": "8.4.24-160000.1.1",
"php8-dom": "8.4.24-160000.1.1",
"php8-embed": "8.4.24-160000.1.1",
"php8-enchant": "8.4.24-160000.1.1",
"php8-exif": "8.4.24-160000.1.1",
"php8-fastcgi": "8.4.24-160000.1.1",
"php8-ffi": "8.4.24-160000.1.1",
"php8-fileinfo": "8.4.24-160000.1.1",
"php8-fpm": "8.4.24-160000.1.1",
"php8-fpm-apache": "8.4.24-160000.1.1",
"php8-ftp": "8.4.24-160000.1.1",
"php8-gd": "8.4.24-160000.1.1",
"php8-gettext": "8.4.24-160000.1.1",
"php8-gmp": "8.4.24-160000.1.1",
"php8-iconv": "8.4.24-160000.1.1",
"php8-intl": "8.4.24-160000.1.1",
"php8-ldap": "8.4.24-160000.1.1",
"php8-mbstring": "8.4.24-160000.1.1",
"php8-mysql": "8.4.24-160000.1.1",
"php8-odbc": "8.4.24-160000.1.1",
"php8-opcache": "8.4.24-160000.1.1",
"php8-openssl": "8.4.24-160000.1.1",
"php8-pcntl": "8.4.24-160000.1.1",
"php8-pdo": "8.4.24-160000.1.1",
"php8-pgsql": "8.4.24-160000.1.1",
"php8-phar": "8.4.24-160000.1.1",
"php8-posix": "8.4.24-160000.1.1",
"php8-readline": "8.4.24-160000.1.1",
"php8-shmop": "8.4.24-160000.1.1",
"php8-snmp": "8.4.24-160000.1.1",
"php8-soap": "8.4.24-160000.1.1",
"php8-sockets": "8.4.24-160000.1.1",
"php8-sodium": "8.4.24-160000.1.1",
"php8-sqlite": "8.4.24-160000.1.1",
"php8-sysvmsg": "8.4.24-160000.1.1",
"php8-sysvsem": "8.4.24-160000.1.1",
"php8-sysvshm": "8.4.24-160000.1.1",
"php8-test": "8.4.24-160000.1.1",
"php8-tidy": "8.4.24-160000.1.1",
"php8-tokenizer": "8.4.24-160000.1.1",
"php8-xmlreader": "8.4.24-160000.1.1",
"php8-xmlwriter": "8.4.24-160000.1.1",
"php8-xsl": "8.4.24-160000.1.1",
"php8-zip": "8.4.24-160000.1.1",
"php8-zlib": "8.4.24-160000.1.1"
}
]
}