<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for php74</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2023:0515-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2023-02-24T14:27:04Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2023-02-24T14:27:04Z</InitialReleaseDate>
    <CurrentReleaseDate>2023-02-24T14:27:04Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for php74</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for php74 fixes the following issues:

  - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366).
  - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367).
  - CVE-2023-0567: Fixed vulnerability where BCrypt hashes erroneously validate if the salt is cut short by `$` (bsc#1208388).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2023-515,SUSE-SLE-Module-Web-Scripting-12-2023-515,SUSE-SLE-SDK-12-SP5-2023-515</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230515-1/</URL>
      <Description>Link for SUSE-SU-2023:0515-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2023-February/013883.html</URL>
      <Description>E-Mail link for SUSE-SU-2023:0515-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1208366</URL>
      <Description>SUSE Bug 1208366</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1208367</URL>
      <Description>SUSE Bug 1208367</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1208388</URL>
      <Description>SUSE Bug 1208388</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-0567/</URL>
      <Description>SUSE CVE CVE-2023-0567 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-0568/</URL>
      <Description>SUSE CVE CVE-2023-0568 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-0662/</URL>
      <Description>SUSE CVE CVE-2023-0662 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Web and Scripting 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Web and Scripting 12">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12" CPE="cpe:/o:suse:sle-module-web-scripting:12">SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5" CPE="cpe:/o:suse:sle-sdk:12:sp5">SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="apache2-mod_php74-7.4.33-1.53.1">
      <FullProductName ProductID="apache2-mod_php74-7.4.33-1.53.1">apache2-mod_php74-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-7.4.33-1.53.1">
      <FullProductName ProductID="php74-7.4.33-1.53.1">php74-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-bcmath-7.4.33-1.53.1">
      <FullProductName ProductID="php74-bcmath-7.4.33-1.53.1">php74-bcmath-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-bz2-7.4.33-1.53.1">
      <FullProductName ProductID="php74-bz2-7.4.33-1.53.1">php74-bz2-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-calendar-7.4.33-1.53.1">
      <FullProductName ProductID="php74-calendar-7.4.33-1.53.1">php74-calendar-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-ctype-7.4.33-1.53.1">
      <FullProductName ProductID="php74-ctype-7.4.33-1.53.1">php74-ctype-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-curl-7.4.33-1.53.1">
      <FullProductName ProductID="php74-curl-7.4.33-1.53.1">php74-curl-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-dba-7.4.33-1.53.1">
      <FullProductName ProductID="php74-dba-7.4.33-1.53.1">php74-dba-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-devel-7.4.33-1.53.1">
      <FullProductName ProductID="php74-devel-7.4.33-1.53.1">php74-devel-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-dom-7.4.33-1.53.1">
      <FullProductName ProductID="php74-dom-7.4.33-1.53.1">php74-dom-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-embed-7.4.33-1.53.1">
      <FullProductName ProductID="php74-embed-7.4.33-1.53.1">php74-embed-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-enchant-7.4.33-1.53.1">
      <FullProductName ProductID="php74-enchant-7.4.33-1.53.1">php74-enchant-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-exif-7.4.33-1.53.1">
      <FullProductName ProductID="php74-exif-7.4.33-1.53.1">php74-exif-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-fastcgi-7.4.33-1.53.1">
      <FullProductName ProductID="php74-fastcgi-7.4.33-1.53.1">php74-fastcgi-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-fileinfo-7.4.33-1.53.1">
      <FullProductName ProductID="php74-fileinfo-7.4.33-1.53.1">php74-fileinfo-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-firebird-7.4.33-1.53.1">
      <FullProductName ProductID="php74-firebird-7.4.33-1.53.1">php74-firebird-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-fpm-7.4.33-1.53.1">
      <FullProductName ProductID="php74-fpm-7.4.33-1.53.1">php74-fpm-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-ftp-7.4.33-1.53.1">
      <FullProductName ProductID="php74-ftp-7.4.33-1.53.1">php74-ftp-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-gd-7.4.33-1.53.1">
      <FullProductName ProductID="php74-gd-7.4.33-1.53.1">php74-gd-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-gettext-7.4.33-1.53.1">
      <FullProductName ProductID="php74-gettext-7.4.33-1.53.1">php74-gettext-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-gmp-7.4.33-1.53.1">
      <FullProductName ProductID="php74-gmp-7.4.33-1.53.1">php74-gmp-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-iconv-7.4.33-1.53.1">
      <FullProductName ProductID="php74-iconv-7.4.33-1.53.1">php74-iconv-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-intl-7.4.33-1.53.1">
      <FullProductName ProductID="php74-intl-7.4.33-1.53.1">php74-intl-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-json-7.4.33-1.53.1">
      <FullProductName ProductID="php74-json-7.4.33-1.53.1">php74-json-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-ldap-7.4.33-1.53.1">
      <FullProductName ProductID="php74-ldap-7.4.33-1.53.1">php74-ldap-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-mbstring-7.4.33-1.53.1">
      <FullProductName ProductID="php74-mbstring-7.4.33-1.53.1">php74-mbstring-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-mysql-7.4.33-1.53.1">
      <FullProductName ProductID="php74-mysql-7.4.33-1.53.1">php74-mysql-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-odbc-7.4.33-1.53.1">
      <FullProductName ProductID="php74-odbc-7.4.33-1.53.1">php74-odbc-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-opcache-7.4.33-1.53.1">
      <FullProductName ProductID="php74-opcache-7.4.33-1.53.1">php74-opcache-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-openssl-7.4.33-1.53.1">
      <FullProductName ProductID="php74-openssl-7.4.33-1.53.1">php74-openssl-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-pcntl-7.4.33-1.53.1">
      <FullProductName ProductID="php74-pcntl-7.4.33-1.53.1">php74-pcntl-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-pdo-7.4.33-1.53.1">
      <FullProductName ProductID="php74-pdo-7.4.33-1.53.1">php74-pdo-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-pgsql-7.4.33-1.53.1">
      <FullProductName ProductID="php74-pgsql-7.4.33-1.53.1">php74-pgsql-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-phar-7.4.33-1.53.1">
      <FullProductName ProductID="php74-phar-7.4.33-1.53.1">php74-phar-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-posix-7.4.33-1.53.1">
      <FullProductName ProductID="php74-posix-7.4.33-1.53.1">php74-posix-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-readline-7.4.33-1.53.1">
      <FullProductName ProductID="php74-readline-7.4.33-1.53.1">php74-readline-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-shmop-7.4.33-1.53.1">
      <FullProductName ProductID="php74-shmop-7.4.33-1.53.1">php74-shmop-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-snmp-7.4.33-1.53.1">
      <FullProductName ProductID="php74-snmp-7.4.33-1.53.1">php74-snmp-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-soap-7.4.33-1.53.1">
      <FullProductName ProductID="php74-soap-7.4.33-1.53.1">php74-soap-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sockets-7.4.33-1.53.1">
      <FullProductName ProductID="php74-sockets-7.4.33-1.53.1">php74-sockets-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sodium-7.4.33-1.53.1">
      <FullProductName ProductID="php74-sodium-7.4.33-1.53.1">php74-sodium-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sqlite-7.4.33-1.53.1">
      <FullProductName ProductID="php74-sqlite-7.4.33-1.53.1">php74-sqlite-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sysvmsg-7.4.33-1.53.1">
      <FullProductName ProductID="php74-sysvmsg-7.4.33-1.53.1">php74-sysvmsg-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sysvsem-7.4.33-1.53.1">
      <FullProductName ProductID="php74-sysvsem-7.4.33-1.53.1">php74-sysvsem-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sysvshm-7.4.33-1.53.1">
      <FullProductName ProductID="php74-sysvshm-7.4.33-1.53.1">php74-sysvshm-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-test-7.4.33-1.53.1">
      <FullProductName ProductID="php74-test-7.4.33-1.53.1">php74-test-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-tidy-7.4.33-1.53.1">
      <FullProductName ProductID="php74-tidy-7.4.33-1.53.1">php74-tidy-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-tokenizer-7.4.33-1.53.1">
      <FullProductName ProductID="php74-tokenizer-7.4.33-1.53.1">php74-tokenizer-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xmlreader-7.4.33-1.53.1">
      <FullProductName ProductID="php74-xmlreader-7.4.33-1.53.1">php74-xmlreader-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xmlrpc-7.4.33-1.53.1">
      <FullProductName ProductID="php74-xmlrpc-7.4.33-1.53.1">php74-xmlrpc-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xmlwriter-7.4.33-1.53.1">
      <FullProductName ProductID="php74-xmlwriter-7.4.33-1.53.1">php74-xmlwriter-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xsl-7.4.33-1.53.1">
      <FullProductName ProductID="php74-xsl-7.4.33-1.53.1">php74-xsl-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-zip-7.4.33-1.53.1">
      <FullProductName ProductID="php74-zip-7.4.33-1.53.1">php74-zip-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-zlib-7.4.33-1.53.1">
      <FullProductName ProductID="php74-zlib-7.4.33-1.53.1">php74-zlib-7.4.33-1.53.1</FullProductName>
    </Branch>
    <Relationship ProductReference="apache2-mod_php74-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php74-7.4.33-1.53.1">apache2-mod_php74-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-7.4.33-1.53.1">php74-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-bcmath-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-bcmath-7.4.33-1.53.1">php74-bcmath-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-bz2-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-bz2-7.4.33-1.53.1">php74-bz2-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-calendar-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-calendar-7.4.33-1.53.1">php74-calendar-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-ctype-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-ctype-7.4.33-1.53.1">php74-ctype-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-curl-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-curl-7.4.33-1.53.1">php74-curl-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-dba-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-dba-7.4.33-1.53.1">php74-dba-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-dom-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-dom-7.4.33-1.53.1">php74-dom-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-enchant-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-enchant-7.4.33-1.53.1">php74-enchant-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-exif-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-exif-7.4.33-1.53.1">php74-exif-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-fastcgi-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-fastcgi-7.4.33-1.53.1">php74-fastcgi-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-fileinfo-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-fileinfo-7.4.33-1.53.1">php74-fileinfo-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-fpm-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-fpm-7.4.33-1.53.1">php74-fpm-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-ftp-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-ftp-7.4.33-1.53.1">php74-ftp-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-gd-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-gd-7.4.33-1.53.1">php74-gd-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-gettext-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-gettext-7.4.33-1.53.1">php74-gettext-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-gmp-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-gmp-7.4.33-1.53.1">php74-gmp-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-iconv-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-iconv-7.4.33-1.53.1">php74-iconv-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-intl-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-intl-7.4.33-1.53.1">php74-intl-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-json-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-json-7.4.33-1.53.1">php74-json-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-ldap-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-ldap-7.4.33-1.53.1">php74-ldap-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-mbstring-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-mbstring-7.4.33-1.53.1">php74-mbstring-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-mysql-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-mysql-7.4.33-1.53.1">php74-mysql-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-odbc-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-odbc-7.4.33-1.53.1">php74-odbc-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-opcache-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-opcache-7.4.33-1.53.1">php74-opcache-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-openssl-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-openssl-7.4.33-1.53.1">php74-openssl-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-pcntl-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-pcntl-7.4.33-1.53.1">php74-pcntl-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-pdo-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-pdo-7.4.33-1.53.1">php74-pdo-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-pgsql-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-pgsql-7.4.33-1.53.1">php74-pgsql-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-phar-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-phar-7.4.33-1.53.1">php74-phar-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-posix-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-posix-7.4.33-1.53.1">php74-posix-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-readline-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-readline-7.4.33-1.53.1">php74-readline-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-shmop-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-shmop-7.4.33-1.53.1">php74-shmop-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-snmp-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-snmp-7.4.33-1.53.1">php74-snmp-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-soap-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-soap-7.4.33-1.53.1">php74-soap-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sockets-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sockets-7.4.33-1.53.1">php74-sockets-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sodium-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sodium-7.4.33-1.53.1">php74-sodium-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sqlite-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sqlite-7.4.33-1.53.1">php74-sqlite-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sysvmsg-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvmsg-7.4.33-1.53.1">php74-sysvmsg-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sysvsem-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvsem-7.4.33-1.53.1">php74-sysvsem-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sysvshm-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvshm-7.4.33-1.53.1">php74-sysvshm-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-tidy-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-tidy-7.4.33-1.53.1">php74-tidy-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-tokenizer-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-tokenizer-7.4.33-1.53.1">php74-tokenizer-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xmlreader-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlreader-7.4.33-1.53.1">php74-xmlreader-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xmlrpc-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlrpc-7.4.33-1.53.1">php74-xmlrpc-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xmlwriter-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlwriter-7.4.33-1.53.1">php74-xmlwriter-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xsl-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xsl-7.4.33-1.53.1">php74-xsl-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-zip-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-zip-7.4.33-1.53.1">php74-zip-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-zlib-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-zlib-7.4.33-1.53.1">php74-zlib-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-devel-7.4.33-1.53.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5:php74-devel-7.4.33-1.53.1">php74-devel-7.4.33-1.53.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.</Note>
    </Notes>
    <CVE>CVE-2023-0567</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php74-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bcmath-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bz2-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-calendar-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ctype-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-curl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dba-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dom-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-enchant-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-exif-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fastcgi-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fileinfo-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fpm-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ftp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gd-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gettext-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gmp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-iconv-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-intl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-json-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ldap-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mbstring-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mysql-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-odbc-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-opcache-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-openssl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pcntl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pdo-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pgsql-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-phar-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-posix-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-readline-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-shmop-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-snmp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-soap-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sockets-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sodium-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sqlite-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvmsg-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvsem-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvshm-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tidy-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tokenizer-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlreader-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlrpc-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlwriter-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xsl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zip-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zlib-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:php74-devel-7.4.33-1.53.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230515-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-0567.html</URL>
        <Description>CVE-2023-0567</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208388</URL>
        <Description>SUSE Bug 1208388</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification. </Note>
    </Notes>
    <CVE>CVE-2023-0568</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php74-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bcmath-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bz2-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-calendar-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ctype-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-curl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dba-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dom-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-enchant-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-exif-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fastcgi-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fileinfo-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fpm-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ftp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gd-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gettext-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gmp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-iconv-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-intl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-json-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ldap-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mbstring-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mysql-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-odbc-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-opcache-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-openssl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pcntl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pdo-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pgsql-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-phar-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-posix-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-readline-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-shmop-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-snmp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-soap-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sockets-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sodium-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sqlite-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvmsg-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvsem-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvshm-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tidy-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tokenizer-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlreader-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlrpc-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlwriter-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xsl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zip-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zlib-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:php74-devel-7.4.33-1.53.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230515-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-0568.html</URL>
        <Description>CVE-2023-0568</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208366</URL>
        <Description>SUSE Bug 1208366</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space. </Note>
    </Notes>
    <CVE>CVE-2023-0662</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php74-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bcmath-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bz2-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-calendar-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ctype-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-curl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dba-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dom-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-enchant-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-exif-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fastcgi-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fileinfo-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fpm-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ftp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gd-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gettext-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gmp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-iconv-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-intl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-json-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ldap-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mbstring-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mysql-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-odbc-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-opcache-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-openssl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pcntl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pdo-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pgsql-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-phar-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-posix-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-readline-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-shmop-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-snmp-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-soap-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sockets-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sodium-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sqlite-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvmsg-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvsem-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvshm-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tidy-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tokenizer-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlreader-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlrpc-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlwriter-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xsl-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zip-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zlib-7.4.33-1.53.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:php74-devel-7.4.33-1.53.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20230515-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-0662.html</URL>
        <Description>CVE-2023-0662</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208367</URL>
        <Description>SUSE Bug 1208367</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
