critical
SUSE-SU-2026:3513-1
Security update for php8
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for php8 fixes the following issues: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security issues in `libgd` (bsc#1273078). - CVE-2026-17543: improper escaping of backslashes in user-provided parameters allows for trivial SQL injection in `ext-pgsql` (bsc#1273075).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.4 | apache2-mod_php8, php8, php8-bcmath and 49 more | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | apache2-mod_php8, php8, php8-bcmath and 49 more | 8.0.30-150400.4.73.1 |
Show all 104 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.4 | apache2-mod_php8 | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8 | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-bcmath | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-bz2 | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-calendar | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-cli | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-ctype | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-curl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-dba | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-devel | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-dom | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-embed | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-enchant | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-exif | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-fastcgi | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-fileinfo | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-fpm | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-ftp | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-gd | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-gettext | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-gmp | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-iconv | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-intl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-ldap | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-mbstring | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-mysql | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-odbc | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-opcache | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-openssl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-pcntl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-pdo | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-pgsql | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-phar | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-posix | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-readline | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-shmop | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-snmp | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-soap | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-sockets | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-sodium | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-sqlite | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-sysvmsg | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-sysvsem | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-sysvshm | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-test | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-tidy | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-tokenizer | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-xmlreader | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-xmlwriter | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-xsl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-zip | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.4 | php8-zlib | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | apache2-mod_php8 | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8 | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-bcmath | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-bz2 | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-calendar | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-cli | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-ctype | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-curl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-dba | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-devel | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-dom | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-embed | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-enchant | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-exif | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-fastcgi | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-fileinfo | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-fpm | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-ftp | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-gd | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-gettext | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-gmp | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-iconv | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-intl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-ldap | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-mbstring | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-mysql | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-odbc | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-opcache | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-openssl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-pcntl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-pdo | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-pgsql | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-phar | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-posix | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-readline | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-shmop | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-snmp | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-soap | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-sockets | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-sodium | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-sqlite | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-sysvmsg | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-sysvsem | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-sysvshm | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-test | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-tidy | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-tokenizer | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-xmlreader | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-xmlwriter | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-xsl | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-zip | 8.0.30-150400.4.73.1 |
| SUSE Linux Enterprise 15.5 | php8-zlib | 8.0.30-150400.4.73.1 |
References
- https://bugzilla.suse.com/1273075
- https://bugzilla.suse.com/1273077
- https://bugzilla.suse.com/1273078
- https://lists.suse.com/pipermail/sle-updates/2026-August/049092.html
- https://www.suse.com/security/cve/CVE-2026-17543/
- https://www.suse.com/security/cve/CVE-2026-7260/
- https://www.suse.com/security/cve/CVE-2026-9672/
- https://www.suse.com/support/security/rating/