Security update for php8 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3661-1 Final 1 1 2022-10-19T12:00:36Z current 2022-10-19T12:00:36Z 2022-10-19T12:00:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php8 This update for php8 fixes the following issues: - php8 was updated to version 8.0.24 - php8 was updated to version 8.0.23 (jsc#SLE-23639). - CVE-2021-21703: Fixed a local privilege escalation via PHP-FPM. (bsc#1192050) - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870) - Fixed missing devel package requires pear and pecl extensions (jsc#SLE-24723, bsc#1200772). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/php-apache:8-2022-3661,Container bci/php-fpm:8-2022-3661,Container bci/php:8-2022-3661,SUSE-2022-3661,SUSE-SLE-Module-Web-Scripting-15-SP4-2022-3661,openSUSE-SLE-15.4-2022-3661 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223661-1/ Link for SUSE-SU-2022:3661-1 https://lists.suse.com/pipermail/sle-security-updates/2022-October/012575.html E-Mail link for SUSE-SU-2022:3661-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1192050 SUSE Bug 1192050 https://bugzilla.suse.com/1200772 SUSE Bug 1200772 https://bugzilla.suse.com/1203867 SUSE Bug 1203867 https://bugzilla.suse.com/1203870 SUSE Bug 1203870 https://www.suse.com/security/cve/CVE-2021-21703/ SUSE CVE CVE-2021-21703 page https://www.suse.com/security/cve/CVE-2022-31628/ SUSE CVE CVE-2022-31628 page https://www.suse.com/security/cve/CVE-2022-31629/ SUSE CVE CVE-2022-31629 page Container bci/php-apache:8 Container bci/php-fpm:8 Container bci/php:8 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 openSUSE Leap 15.4 apache2-mod_php8-8.0.24-150400.4.14.1 php8-8.0.24-150400.4.14.1 php8-cli-8.0.24-150400.4.14.1 php8-curl-8.0.24-150400.4.14.1 php8-mbstring-8.0.24-150400.4.14.1 php8-openssl-8.0.24-150400.4.14.1 php8-phar-8.0.24-150400.4.14.1 php8-zip-8.0.24-150400.4.14.1 php8-zlib-8.0.24-150400.4.14.1 php8-fpm-8.0.24-150400.4.14.1 php8-bcmath-8.0.24-150400.4.14.1 php8-bz2-8.0.24-150400.4.14.1 php8-calendar-8.0.24-150400.4.14.1 php8-ctype-8.0.24-150400.4.14.1 php8-dba-8.0.24-150400.4.14.1 php8-devel-8.0.24-150400.4.14.1 php8-dom-8.0.24-150400.4.14.1 php8-embed-8.0.24-150400.4.14.1 php8-enchant-8.0.24-150400.4.14.1 php8-exif-8.0.24-150400.4.14.1 php8-fastcgi-8.0.24-150400.4.14.1 php8-fileinfo-8.0.24-150400.4.14.1 php8-ftp-8.0.24-150400.4.14.1 php8-gd-8.0.24-150400.4.14.1 php8-gettext-8.0.24-150400.4.14.1 php8-gmp-8.0.24-150400.4.14.1 php8-iconv-8.0.24-150400.4.14.1 php8-intl-8.0.24-150400.4.14.1 php8-ldap-8.0.24-150400.4.14.1 php8-mysql-8.0.24-150400.4.14.1 php8-odbc-8.0.24-150400.4.14.1 php8-opcache-8.0.24-150400.4.14.1 php8-pcntl-8.0.24-150400.4.14.1 php8-pdo-8.0.24-150400.4.14.1 php8-pgsql-8.0.24-150400.4.14.1 php8-posix-8.0.24-150400.4.14.1 php8-readline-8.0.24-150400.4.14.1 php8-shmop-8.0.24-150400.4.14.1 php8-snmp-8.0.24-150400.4.14.1 php8-soap-8.0.24-150400.4.14.1 php8-sockets-8.0.24-150400.4.14.1 php8-sodium-8.0.24-150400.4.14.1 php8-sqlite-8.0.24-150400.4.14.1 php8-sysvmsg-8.0.24-150400.4.14.1 php8-sysvsem-8.0.24-150400.4.14.1 php8-sysvshm-8.0.24-150400.4.14.1 php8-test-8.0.24-150400.4.14.1 php8-tidy-8.0.24-150400.4.14.1 php8-tokenizer-8.0.24-150400.4.14.1 php8-xmlreader-8.0.24-150400.4.14.1 php8-xmlwriter-8.0.24-150400.4.14.1 php8-xsl-8.0.24-150400.4.14.1 apache2-mod_php8-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-cli-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-curl-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-mbstring-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-openssl-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-phar-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-zip-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-zlib-8.0.24-150400.4.14.1 as a component of Container bci/php-apache:8 php8-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-cli-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-curl-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-fpm-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-mbstring-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-openssl-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-phar-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-zip-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-zlib-8.0.24-150400.4.14.1 as a component of Container bci/php-fpm:8 php8-8.0.24-150400.4.14.1 as a component of Container bci/php:8 php8-cli-8.0.24-150400.4.14.1 as a component of Container bci/php:8 php8-curl-8.0.24-150400.4.14.1 as a component of Container bci/php:8 php8-mbstring-8.0.24-150400.4.14.1 as a component of Container bci/php:8 php8-openssl-8.0.24-150400.4.14.1 as a component of Container bci/php:8 php8-phar-8.0.24-150400.4.14.1 as a component of Container bci/php:8 php8-zip-8.0.24-150400.4.14.1 as a component of Container bci/php:8 php8-zlib-8.0.24-150400.4.14.1 as a component of Container bci/php:8 apache2-mod_php8-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-bcmath-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-bz2-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-calendar-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-cli-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-ctype-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-curl-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-dba-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-devel-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-dom-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-embed-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-enchant-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-exif-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-fastcgi-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-fileinfo-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-fpm-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-ftp-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-gd-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-gettext-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-gmp-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-iconv-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-intl-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-ldap-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-mbstring-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-mysql-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-odbc-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-opcache-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-openssl-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-pcntl-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-pdo-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-pgsql-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-phar-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-posix-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-readline-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-shmop-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-snmp-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-soap-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-sockets-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-sodium-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-sqlite-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-sysvmsg-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-sysvsem-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-sysvshm-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-test-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-tidy-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-tokenizer-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-xmlreader-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-xmlwriter-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-xsl-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-zip-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 php8-zlib-8.0.24-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 apache2-mod_php8-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-bcmath-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-bz2-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-calendar-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-cli-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-ctype-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-curl-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-dba-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-devel-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-dom-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-embed-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-enchant-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-exif-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-fastcgi-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-fileinfo-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-fpm-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-ftp-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-gd-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-gettext-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-gmp-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-iconv-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-intl-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-ldap-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-mbstring-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-mysql-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-odbc-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-opcache-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-openssl-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-pcntl-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-pdo-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-pgsql-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-phar-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-posix-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-readline-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-shmop-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-snmp-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-soap-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-sockets-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-sodium-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-sqlite-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-sysvmsg-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-sysvsem-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-sysvshm-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-test-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-tidy-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-tokenizer-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-xmlreader-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-xmlwriter-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-xsl-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-zip-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 php8-zlib-8.0.24-150400.4.14.1 as a component of openSUSE Leap 15.4 In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user. CVE-2021-21703 Container bci/php-apache:8:apache2-mod_php8-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-zlib-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-fpm-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-zlib-8.0.24-150400.4.14.1 Container bci/php:8:php8-8.0.24-150400.4.14.1 Container bci/php:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php:8:php8-zlib-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:apache2-mod_php8-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-bcmath-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-bz2-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-calendar-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-cli-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ctype-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-curl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-dba-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-devel-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-dom-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-embed-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-enchant-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-exif-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fastcgi-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fileinfo-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fpm-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ftp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gd-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gettext-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gmp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-iconv-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-intl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ldap-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-mbstring-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-mysql-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-odbc-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-opcache-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-openssl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pcntl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pdo-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pgsql-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-phar-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-posix-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-readline-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-shmop-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-snmp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-soap-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sockets-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sodium-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sqlite-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvmsg-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvsem-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvshm-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-test-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-tidy-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-tokenizer-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xmlreader-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xmlwriter-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xsl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-zip-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-zlib-8.0.24-150400.4.14.1 openSUSE Leap 15.4:apache2-mod_php8-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-bcmath-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-bz2-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-calendar-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-cli-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ctype-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-curl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-dba-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-devel-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-dom-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-embed-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-enchant-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-exif-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fastcgi-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fileinfo-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fpm-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ftp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gd-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gettext-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gmp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-iconv-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-intl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ldap-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-mbstring-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-mysql-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-odbc-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-opcache-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-openssl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pcntl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pdo-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pgsql-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-phar-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-posix-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-readline-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-shmop-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-snmp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-soap-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sockets-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sodium-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sqlite-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvmsg-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvsem-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvshm-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-test-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-tidy-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-tokenizer-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xmlreader-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xmlwriter-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xsl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-zip-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-zlib-8.0.24-150400.4.14.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223661-1/ https://www.suse.com/security/cve/CVE-2021-21703.html CVE-2021-21703 https://bugzilla.suse.com/1192050 SUSE Bug 1192050 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop. CVE-2022-31628 Container bci/php-apache:8:apache2-mod_php8-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-zlib-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-fpm-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-zlib-8.0.24-150400.4.14.1 Container bci/php:8:php8-8.0.24-150400.4.14.1 Container bci/php:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php:8:php8-zlib-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:apache2-mod_php8-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-bcmath-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-bz2-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-calendar-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-cli-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ctype-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-curl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-dba-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-devel-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-dom-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-embed-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-enchant-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-exif-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fastcgi-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fileinfo-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fpm-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ftp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gd-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gettext-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gmp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-iconv-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-intl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ldap-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-mbstring-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-mysql-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-odbc-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-opcache-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-openssl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pcntl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pdo-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pgsql-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-phar-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-posix-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-readline-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-shmop-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-snmp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-soap-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sockets-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sodium-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sqlite-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvmsg-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvsem-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvshm-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-test-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-tidy-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-tokenizer-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xmlreader-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xmlwriter-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xsl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-zip-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-zlib-8.0.24-150400.4.14.1 openSUSE Leap 15.4:apache2-mod_php8-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-bcmath-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-bz2-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-calendar-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-cli-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ctype-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-curl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-dba-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-devel-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-dom-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-embed-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-enchant-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-exif-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fastcgi-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fileinfo-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fpm-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ftp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gd-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gettext-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gmp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-iconv-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-intl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ldap-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-mbstring-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-mysql-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-odbc-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-opcache-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-openssl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pcntl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pdo-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pgsql-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-phar-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-posix-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-readline-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-shmop-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-snmp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-soap-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sockets-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sodium-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sqlite-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvmsg-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvsem-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvshm-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-test-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-tidy-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-tokenizer-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xmlreader-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xmlwriter-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xsl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-zip-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-zlib-8.0.24-150400.4.14.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223661-1/ https://www.suse.com/security/cve/CVE-2022-31628.html CVE-2022-31628 https://bugzilla.suse.com/1203867 SUSE Bug 1203867 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications. CVE-2022-31629 Container bci/php-apache:8:apache2-mod_php8-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php-apache:8:php8-zlib-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-fpm-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php-fpm:8:php8-zlib-8.0.24-150400.4.14.1 Container bci/php:8:php8-8.0.24-150400.4.14.1 Container bci/php:8:php8-cli-8.0.24-150400.4.14.1 Container bci/php:8:php8-curl-8.0.24-150400.4.14.1 Container bci/php:8:php8-mbstring-8.0.24-150400.4.14.1 Container bci/php:8:php8-openssl-8.0.24-150400.4.14.1 Container bci/php:8:php8-phar-8.0.24-150400.4.14.1 Container bci/php:8:php8-zip-8.0.24-150400.4.14.1 Container bci/php:8:php8-zlib-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:apache2-mod_php8-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-bcmath-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-bz2-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-calendar-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-cli-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ctype-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-curl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-dba-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-devel-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-dom-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-embed-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-enchant-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-exif-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fastcgi-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fileinfo-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-fpm-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ftp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gd-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gettext-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-gmp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-iconv-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-intl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-ldap-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-mbstring-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-mysql-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-odbc-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-opcache-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-openssl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pcntl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pdo-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-pgsql-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-phar-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-posix-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-readline-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-shmop-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-snmp-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-soap-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sockets-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sodium-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sqlite-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvmsg-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvsem-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-sysvshm-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-test-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-tidy-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-tokenizer-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xmlreader-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xmlwriter-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-xsl-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-zip-8.0.24-150400.4.14.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:php8-zlib-8.0.24-150400.4.14.1 openSUSE Leap 15.4:apache2-mod_php8-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-bcmath-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-bz2-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-calendar-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-cli-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ctype-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-curl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-dba-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-devel-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-dom-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-embed-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-enchant-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-exif-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fastcgi-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fileinfo-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-fpm-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ftp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gd-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gettext-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-gmp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-iconv-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-intl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-ldap-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-mbstring-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-mysql-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-odbc-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-opcache-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-openssl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pcntl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pdo-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-pgsql-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-phar-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-posix-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-readline-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-shmop-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-snmp-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-soap-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sockets-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sodium-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sqlite-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvmsg-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvsem-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-sysvshm-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-test-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-tidy-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-tokenizer-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xmlreader-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xmlwriter-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-xsl-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-zip-8.0.24-150400.4.14.1 openSUSE Leap 15.4:php8-zlib-8.0.24-150400.4.14.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223661-1/ https://www.suse.com/security/cve/CVE-2022-31629.html CVE-2022-31629 https://bugzilla.suse.com/1203870 SUSE Bug 1203870