SUSE-SU-2026:23144-1
Security update for php8
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). - CVE-2026-9672: Upgrade libgd (bsc#1273078). - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075). - CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 16.0 | apache2-mod_php8, php8, php8-bcmath ve 50 tane daha | 8.4.24-160000.1.1 |
1 kaynaktaki 53 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 16.0 | apache2-mod_php8 | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8 | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-bcmath | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-bz2 | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-calendar | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-cli | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-ctype | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-curl | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-dba | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-devel | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-dom | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-embed | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-enchant | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-exif | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-fastcgi | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-ffi | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-fileinfo | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-fpm | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-fpm-apache | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-ftp | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-gd | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-gettext | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-gmp | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-iconv | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-intl | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-ldap | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-mbstring | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-mysql | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-odbc | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-opcache | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-openssl | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-pcntl | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-pdo | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-pgsql | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-phar | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-posix | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-readline | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-shmop | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-snmp | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-soap | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-sockets | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-sodium | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-sqlite | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-sysvmsg | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-sysvsem | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-sysvshm | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-tidy | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-tokenizer | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-xmlreader | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-xmlwriter | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-xsl | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-zip | 8.4.24-160000.1.1 |
| SUSE Linux Enterprise 16.0 | php8-zlib | 8.4.24-160000.1.1 |
Referanslar
- https://bugzilla.suse.com/1273075
- https://bugzilla.suse.com/1273076
- https://bugzilla.suse.com/1273077
- https://bugzilla.suse.com/1273078
- https://lists.suse.com/pipermail/sle-updates/2026-August/049271.html
- https://www.suse.com/security/cve/CVE-2026-17543/
- https://www.suse.com/security/cve/CVE-2026-17544/
- https://www.suse.com/security/cve/CVE-2026-7260/