RHSA-2026:1628

csafDEsuse_csaf

security update for php

view advisory published 2026-02-02

security update for php

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2025-14180UShigh7.5—
In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_P…
CVE-2025-14178UShigh8.2—
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the tota…
CVE-2025-14177UShigh7.5Exploit
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memo…
02

references

External citations — patches, advisories, analysis.

03

remediations (75)

  • Fixedphp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-bcmath-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-bcmath-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-bcmath-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-cli-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-cli-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-cli-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-common-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-common-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-common-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-dba-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-dba-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-dba-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-dbg-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-dbg-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-dbg-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-devel-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-devel-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-devel-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-embedded-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-embedded-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-embedded-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-enchant-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-enchant-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-enchant-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-ffi-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-ffi-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-ffi-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-fpm-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-fpm-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-fpm-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-gd-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-gd-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-gd-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-gmp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-gmp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-gmp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-intl-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-intl-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-intl-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-ldap-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-ldap-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-ldap-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-mbstring-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-mbstring-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-mbstring-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-mysqlnd-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-mysqlnd-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-mysqlnd-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-odbc-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-odbc-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-odbc-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-opcache-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-opcache-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-opcache-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-pdo-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-pdo-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-pdo-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-pgsql-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-pgsql-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-pgsql-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-process-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-process-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-process-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-snmp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-snmp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-snmp-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-soap-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-soap-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-soap-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-xml-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-xml-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-xml-0:8.3.29-1.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan