critical Security update for php8

SUSE-SLE-Module-Web-Scripting-15-SP7-2026-1958

This update for php8 fixes the following issues - CVE-2025-14179: improper handling of NULL bytes by the PDO Firebird driver when preparing SQL queries can lead to SQL injection (bsc#1264778). - CVE-2026-6722: use-after-free in SOAP using Apache map can lead to remote code execution (bsc#1264776). - CVE-2026-6735: improper validation of the request URI within the PHP-FPM status page can lead to XSS (bsc#1264775). - CVE-2026-7258: signed `char` values passed to `ctype` functions like `isxdigit` can lead to OOB access and denial of service (bsc#1264774). - CVE-2026-7259: NULL pointer dereference in `php_mb_check_encoding()` via `mb_ereg_search_init()` can lead to a denial of service (bsc#1264773). - CVE-2026-7261: use-after-free due to incorrectly handled persistence of handler objects when SOAP_PERSISTENCE_SESSION is configured can lead to memory corruption, information disclosure and process crashes (bsc#1264772). - CVE-2026-7262: NULL pointer dereference caused by mistake in the SOAP decoding process when a typemap is configured can lead to a denial of service (bsc#1264771). - CVE-2026-7568: integer overflow in the `metaphone` function can lead to undefined behavior and affect the availability of the PHPprocess (bsc#1264769). Other updates: - Updated to 8.3.31.

• Release Date
  May 18 2026
• References
  Bugzilla: 1264772, 1264773, 1264774, 1264775, 1264776, 1264778, 1264769, 1264771
  CVEs: CVE-2025-14179, CVE-2026-6722, CVE-2026-6735, CVE-2026-7258, CVE-2026-7259, CVE-2026-7261, CVE-2026-7262, CVE-2026-7568
• Type
  security
• Severity
  critical

cloud_download Downloads

Web and Scripting Module 15.7 x86_64

• Packages
  apache2-mod_php8
  PHP module for the Apache 2.x webserver

  8.3.31-150700.3.12.1 lock rpm lock src

  php8
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-bcmath
  "Binary Calculator" extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-bz2
  PHP bzip2 codec support

  8.3.31-150700.3.12.1 lock rpm

  php8-calendar
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-cli
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm

  php8-ctype
  Character class extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-curl
  PHP libcurl integration

  8.3.31-150700.3.12.1 lock rpm

  php8-dba
  Database abstraction layer for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-devel
  PHP development files for C/C++ extensions

  8.3.31-150700.3.12.1 lock rpm

  php8-dom
  Document Object Model extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-embed
  Embedded SAPI Library

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-enchant
  Spell checking extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-exif
  EXIF metadata extensions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fastcgi
  FastCGI PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-fileinfo
  File identification extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fpm
  FastCGI Process Manager PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-ftp
  FTP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gd
  GD Graphics Library extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gettext
  Native language support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gmp
  Bignum extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-iconv
  Character set conversion functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-intl
  ICU integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-ldap
  LDAP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mbstring
  Multibyte string functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mysql
  MySQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-odbc
  ODBC extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-opcache
  Opcode cache extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-openssl
  OpenSSL integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pcntl
  Process Control extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pdo
  PHP Data Objects extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pgsql
  PostgreSQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-phar
  PHP Archive extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-posix
  POSIX functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-readline
  PHP readline extension

  8.3.31-150700.3.12.1 lock rpm

  php8-shmop
  Alternate, low-level shared memory implementation for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-snmp
  SNMP extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-soap
  SOAP/WSDL extension module for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sockets
  Berkeley sockets API for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sodium
  Cryptographic Extension Based on Libsodium

  8.3.31-150700.3.12.1 lock rpm

  php8-sqlite
  SQLite database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvmsg
  SysV Message Queue support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvsem
  SysV Semaphore support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvshm
  SysV Shared Memory support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-test
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-tidy
  PHP binding for the Tidy HTML cleaner

  8.3.31-150700.3.12.1 lock rpm

  php8-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlreader
  Streaming XML reader extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlwriter
  Streaming-based XML writer extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xsl
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-zip
  ZIP archive support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-zlib
  Zlib compression support for PHP

  8.3.31-150700.3.12.1 lock rpm

Web and Scripting Module 15.7 ppc64le

• Packages
  apache2-mod_php8
  PHP module for the Apache 2.x webserver

  8.3.31-150700.3.12.1 lock rpm lock src

  php8
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-bcmath
  "Binary Calculator" extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-bz2
  PHP bzip2 codec support

  8.3.31-150700.3.12.1 lock rpm

  php8-calendar
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-cli
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm

  php8-ctype
  Character class extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-curl
  PHP libcurl integration

  8.3.31-150700.3.12.1 lock rpm

  php8-dba
  Database abstraction layer for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-devel
  PHP development files for C/C++ extensions

  8.3.31-150700.3.12.1 lock rpm

  php8-dom
  Document Object Model extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-embed
  Embedded SAPI Library

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-enchant
  Spell checking extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-exif
  EXIF metadata extensions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fastcgi
  FastCGI PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-fileinfo
  File identification extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fpm
  FastCGI Process Manager PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-ftp
  FTP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gd
  GD Graphics Library extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gettext
  Native language support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gmp
  Bignum extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-iconv
  Character set conversion functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-intl
  ICU integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-ldap
  LDAP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mbstring
  Multibyte string functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mysql
  MySQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-odbc
  ODBC extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-opcache
  Opcode cache extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-openssl
  OpenSSL integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pcntl
  Process Control extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pdo
  PHP Data Objects extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pgsql
  PostgreSQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-phar
  PHP Archive extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-posix
  POSIX functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-readline
  PHP readline extension

  8.3.31-150700.3.12.1 lock rpm

  php8-shmop
  Alternate, low-level shared memory implementation for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-snmp
  SNMP extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-soap
  SOAP/WSDL extension module for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sockets
  Berkeley sockets API for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sodium
  Cryptographic Extension Based on Libsodium

  8.3.31-150700.3.12.1 lock rpm

  php8-sqlite
  SQLite database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvmsg
  SysV Message Queue support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvsem
  SysV Semaphore support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvshm
  SysV Shared Memory support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-test
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-tidy
  PHP binding for the Tidy HTML cleaner

  8.3.31-150700.3.12.1 lock rpm

  php8-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlreader
  Streaming XML reader extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlwriter
  Streaming-based XML writer extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xsl
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-zip
  ZIP archive support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-zlib
  Zlib compression support for PHP

  8.3.31-150700.3.12.1 lock rpm

Web and Scripting Module 15.7 aarch64

• Packages
  apache2-mod_php8
  PHP module for the Apache 2.x webserver

  8.3.31-150700.3.12.1 lock rpm lock src

  php8
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-bcmath
  "Binary Calculator" extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-bz2
  PHP bzip2 codec support

  8.3.31-150700.3.12.1 lock rpm

  php8-calendar
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-cli
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm

  php8-ctype
  Character class extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-curl
  PHP libcurl integration

  8.3.31-150700.3.12.1 lock rpm

  php8-dba
  Database abstraction layer for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-devel
  PHP development files for C/C++ extensions

  8.3.31-150700.3.12.1 lock rpm

  php8-dom
  Document Object Model extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-embed
  Embedded SAPI Library

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-enchant
  Spell checking extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-exif
  EXIF metadata extensions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fastcgi
  FastCGI PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-fileinfo
  File identification extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fpm
  FastCGI Process Manager PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-ftp
  FTP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gd
  GD Graphics Library extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gettext
  Native language support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gmp
  Bignum extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-iconv
  Character set conversion functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-intl
  ICU integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-ldap
  LDAP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mbstring
  Multibyte string functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mysql
  MySQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-odbc
  ODBC extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-opcache
  Opcode cache extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-openssl
  OpenSSL integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pcntl
  Process Control extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pdo
  PHP Data Objects extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pgsql
  PostgreSQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-phar
  PHP Archive extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-posix
  POSIX functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-readline
  PHP readline extension

  8.3.31-150700.3.12.1 lock rpm

  php8-shmop
  Alternate, low-level shared memory implementation for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-snmp
  SNMP extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-soap
  SOAP/WSDL extension module for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sockets
  Berkeley sockets API for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sodium
  Cryptographic Extension Based on Libsodium

  8.3.31-150700.3.12.1 lock rpm

  php8-sqlite
  SQLite database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvmsg
  SysV Message Queue support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvsem
  SysV Semaphore support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvshm
  SysV Shared Memory support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-test
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-tidy
  PHP binding for the Tidy HTML cleaner

  8.3.31-150700.3.12.1 lock rpm

  php8-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlreader
  Streaming XML reader extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlwriter
  Streaming-based XML writer extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xsl
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-zip
  ZIP archive support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-zlib
  Zlib compression support for PHP

  8.3.31-150700.3.12.1 lock rpm

Web and Scripting Module 15.7 s390x

• Packages
  apache2-mod_php8
  PHP module for the Apache 2.x webserver

  8.3.31-150700.3.12.1 lock rpm lock src

  php8
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-bcmath
  "Binary Calculator" extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-bz2
  PHP bzip2 codec support

  8.3.31-150700.3.12.1 lock rpm

  php8-calendar
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-cli
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm

  php8-ctype
  Character class extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-curl
  PHP libcurl integration

  8.3.31-150700.3.12.1 lock rpm

  php8-dba
  Database abstraction layer for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-devel
  PHP development files for C/C++ extensions

  8.3.31-150700.3.12.1 lock rpm

  php8-dom
  Document Object Model extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-embed
  Embedded SAPI Library

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-enchant
  Spell checking extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-exif
  EXIF metadata extensions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fastcgi
  FastCGI PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-fileinfo
  File identification extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-fpm
  FastCGI Process Manager PHP Module

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-ftp
  FTP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gd
  GD Graphics Library extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gettext
  Native language support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-gmp
  Bignum extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-iconv
  Character set conversion functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-intl
  ICU integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-ldap
  LDAP protocol support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mbstring
  Multibyte string functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-mysql
  MySQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-odbc
  ODBC extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-opcache
  Opcode cache extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-openssl
  OpenSSL integration for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pcntl
  Process Control extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pdo
  PHP Data Objects extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-pgsql
  PostgreSQL database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-phar
  PHP Archive extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-posix
  POSIX functions for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-readline
  PHP readline extension

  8.3.31-150700.3.12.1 lock rpm

  php8-shmop
  Alternate, low-level shared memory implementation for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-snmp
  SNMP extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-soap
  SOAP/WSDL extension module for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sockets
  Berkeley sockets API for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sodium
  Cryptographic Extension Based on Libsodium

  8.3.31-150700.3.12.1 lock rpm

  php8-sqlite
  SQLite database client for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvmsg
  SysV Message Queue support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvsem
  SysV Semaphore support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-sysvshm
  SysV Shared Memory support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-test
  Interpreter for the PHP scripting language version 8

  8.3.31-150700.3.12.1 lock rpm lock src

  php8-tidy
  PHP binding for the Tidy HTML cleaner

  8.3.31-150700.3.12.1 lock rpm

  php8-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlreader
  Streaming XML reader extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xmlwriter
  Streaming-based XML writer extension for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-xsl
  PHP Extension Module

  8.3.31-150700.3.12.1 lock rpm

  php8-zip
  ZIP archive support for PHP

  8.3.31-150700.3.12.1 lock rpm

  php8-zlib
  Zlib compression support for PHP

  8.3.31-150700.3.12.1 lock rpm