Security update for php8 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:1446-1 Final 1 1 2024-04-26T07:27:04Z current 2024-04-26T07:27:04Z 2024-04-26T07:27:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php8 This update for php8 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure (bsc#1222857) - CVE-2024-3096: Fixed bypass on null byte leading passwords checked via password_verify (bsc#1222858) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/php-apache:latest-2024-1446,Container bci/php-fpm:latest-2024-1446,Container bci/php:latest-2024-1446,SUSE-2024-1446,SUSE-SLE-Module-Web-Scripting-15-SP5-2024-1446,openSUSE-SLE-15.5-2024-1446 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20241446-1/ Link for SUSE-SU-2024:1446-1 https://lists.suse.com/pipermail/sle-security-updates/2024-April/018424.html E-Mail link for SUSE-SU-2024:1446-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1222857 SUSE Bug 1222857 https://bugzilla.suse.com/1222858 SUSE Bug 1222858 https://www.suse.com/security/cve/CVE-2024-2756/ SUSE CVE CVE-2024-2756 page https://www.suse.com/security/cve/CVE-2024-3096/ SUSE CVE CVE-2024-3096 page Container bci/php-apache:latest Container bci/php-fpm:latest Container bci/php:latest SUSE Linux Enterprise Module for Web and Scripting 15 SP5 openSUSE Leap 15.5 apache2-mod_php8-8.0.30-150400.4.40.1 php8-8.0.30-150400.4.40.1 php8-cli-8.0.30-150400.4.40.1 php8-curl-8.0.30-150400.4.40.1 php8-mbstring-8.0.30-150400.4.40.1 php8-openssl-8.0.30-150400.4.40.1 php8-phar-8.0.30-150400.4.40.1 php8-zip-8.0.30-150400.4.40.1 php8-zlib-8.0.30-150400.4.40.1 php8-fpm-8.0.30-150400.4.40.1 php8-readline-8.0.30-150400.4.40.1 php8-bcmath-8.0.30-150400.4.40.1 php8-bz2-8.0.30-150400.4.40.1 php8-calendar-8.0.30-150400.4.40.1 php8-ctype-8.0.30-150400.4.40.1 php8-dba-8.0.30-150400.4.40.1 php8-devel-8.0.30-150400.4.40.1 php8-dom-8.0.30-150400.4.40.1 php8-embed-8.0.30-150400.4.40.1 php8-enchant-8.0.30-150400.4.40.1 php8-exif-8.0.30-150400.4.40.1 php8-fastcgi-8.0.30-150400.4.40.1 php8-fileinfo-8.0.30-150400.4.40.1 php8-ftp-8.0.30-150400.4.40.1 php8-gd-8.0.30-150400.4.40.1 php8-gettext-8.0.30-150400.4.40.1 php8-gmp-8.0.30-150400.4.40.1 php8-iconv-8.0.30-150400.4.40.1 php8-intl-8.0.30-150400.4.40.1 php8-ldap-8.0.30-150400.4.40.1 php8-mysql-8.0.30-150400.4.40.1 php8-odbc-8.0.30-150400.4.40.1 php8-opcache-8.0.30-150400.4.40.1 php8-pcntl-8.0.30-150400.4.40.1 php8-pdo-8.0.30-150400.4.40.1 php8-pgsql-8.0.30-150400.4.40.1 php8-posix-8.0.30-150400.4.40.1 php8-shmop-8.0.30-150400.4.40.1 php8-snmp-8.0.30-150400.4.40.1 php8-soap-8.0.30-150400.4.40.1 php8-sockets-8.0.30-150400.4.40.1 php8-sodium-8.0.30-150400.4.40.1 php8-sqlite-8.0.30-150400.4.40.1 php8-sysvmsg-8.0.30-150400.4.40.1 php8-sysvsem-8.0.30-150400.4.40.1 php8-sysvshm-8.0.30-150400.4.40.1 php8-test-8.0.30-150400.4.40.1 php8-tidy-8.0.30-150400.4.40.1 php8-tokenizer-8.0.30-150400.4.40.1 php8-xmlreader-8.0.30-150400.4.40.1 php8-xmlwriter-8.0.30-150400.4.40.1 php8-xsl-8.0.30-150400.4.40.1 apache2-mod_php8-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-cli-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-curl-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-mbstring-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-openssl-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-phar-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-zip-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-zlib-8.0.30-150400.4.40.1 as a component of Container bci/php-apache:latest php8-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-cli-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-curl-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-fpm-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-mbstring-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-openssl-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-phar-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-zip-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-zlib-8.0.30-150400.4.40.1 as a component of Container bci/php-fpm:latest php8-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-cli-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-curl-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-mbstring-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-openssl-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-phar-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-readline-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-zip-8.0.30-150400.4.40.1 as a component of Container bci/php:latest php8-zlib-8.0.30-150400.4.40.1 as a component of Container bci/php:latest apache2-mod_php8-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-bcmath-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-bz2-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-calendar-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-cli-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-ctype-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-curl-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-dba-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-devel-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-dom-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-embed-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-enchant-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-exif-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-fastcgi-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-fileinfo-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-fpm-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-ftp-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-gd-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-gettext-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-gmp-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-iconv-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-intl-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-ldap-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-mbstring-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-mysql-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-odbc-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-opcache-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-openssl-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-pcntl-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-pdo-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-pgsql-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-phar-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-posix-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-readline-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-shmop-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-snmp-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-soap-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-sockets-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-sodium-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-sqlite-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-sysvmsg-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-sysvsem-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-sysvshm-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-test-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-tidy-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-tokenizer-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-xmlreader-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-xmlwriter-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-xsl-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-zip-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 php8-zlib-8.0.30-150400.4.40.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 apache2-mod_php8-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-bcmath-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-bz2-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-calendar-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-cli-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-ctype-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-curl-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-dba-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-devel-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-dom-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-embed-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-enchant-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-exif-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-fastcgi-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-fileinfo-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-fpm-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-ftp-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-gd-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-gettext-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-gmp-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-iconv-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-intl-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-ldap-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-mbstring-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-mysql-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-odbc-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-opcache-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-openssl-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-pcntl-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-pdo-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-pgsql-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-phar-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-posix-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-readline-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-shmop-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-snmp-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-soap-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-sockets-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-sodium-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-sqlite-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-sysvmsg-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-sysvsem-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-sysvshm-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-test-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-tidy-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-tokenizer-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-xmlreader-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-xmlwriter-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-xsl-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-zip-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 php8-zlib-8.0.30-150400.4.40.1 as a component of openSUSE Leap 15.5 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. CVE-2024-2756 Container bci/php-apache:latest:apache2-mod_php8-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-cli-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-curl-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-mbstring-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-openssl-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-phar-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-zip-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-zlib-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-cli-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-curl-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-fpm-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-mbstring-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-openssl-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-phar-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-zip-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-zlib-8.0.30-150400.4.40.1 Container bci/php:latest:php8-8.0.30-150400.4.40.1 Container bci/php:latest:php8-cli-8.0.30-150400.4.40.1 Container bci/php:latest:php8-curl-8.0.30-150400.4.40.1 Container bci/php:latest:php8-mbstring-8.0.30-150400.4.40.1 Container bci/php:latest:php8-openssl-8.0.30-150400.4.40.1 Container bci/php:latest:php8-phar-8.0.30-150400.4.40.1 Container bci/php:latest:php8-readline-8.0.30-150400.4.40.1 Container bci/php:latest:php8-zip-8.0.30-150400.4.40.1 Container bci/php:latest:php8-zlib-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:apache2-mod_php8-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-bcmath-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-bz2-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-calendar-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-cli-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-ctype-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-curl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-dba-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-devel-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-dom-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-embed-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-enchant-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-exif-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-fastcgi-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-fileinfo-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-fpm-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-ftp-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-gd-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-gettext-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-gmp-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-iconv-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-intl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-ldap-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-mbstring-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-mysql-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-odbc-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-opcache-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-openssl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-pcntl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-pdo-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-pgsql-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-phar-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-posix-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-readline-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-shmop-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-snmp-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-soap-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sockets-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sodium-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sqlite-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sysvmsg-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sysvsem-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sysvshm-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-test-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-tidy-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-tokenizer-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-xmlreader-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-xmlwriter-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-xsl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-zip-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-zlib-8.0.30-150400.4.40.1 openSUSE Leap 15.5:apache2-mod_php8-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-bcmath-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-bz2-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-calendar-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-cli-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-ctype-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-curl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-dba-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-devel-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-dom-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-embed-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-enchant-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-exif-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-fastcgi-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-fileinfo-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-fpm-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-ftp-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-gd-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-gettext-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-gmp-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-iconv-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-intl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-ldap-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-mbstring-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-mysql-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-odbc-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-opcache-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-openssl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-pcntl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-pdo-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-pgsql-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-phar-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-posix-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-readline-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-shmop-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-snmp-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-soap-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sockets-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sodium-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sqlite-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sysvmsg-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sysvsem-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sysvshm-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-test-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-tidy-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-tokenizer-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-xmlreader-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-xmlwriter-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-xsl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-zip-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-zlib-8.0.30-150400.4.40.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20241446-1/ https://www.suse.com/security/cve/CVE-2024-2756.html CVE-2024-2756 https://bugzilla.suse.com/1222857 SUSE Bug 1222857 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. CVE-2024-3096 Container bci/php-apache:latest:apache2-mod_php8-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-cli-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-curl-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-mbstring-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-openssl-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-phar-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-zip-8.0.30-150400.4.40.1 Container bci/php-apache:latest:php8-zlib-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-cli-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-curl-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-fpm-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-mbstring-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-openssl-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-phar-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-zip-8.0.30-150400.4.40.1 Container bci/php-fpm:latest:php8-zlib-8.0.30-150400.4.40.1 Container bci/php:latest:php8-8.0.30-150400.4.40.1 Container bci/php:latest:php8-cli-8.0.30-150400.4.40.1 Container bci/php:latest:php8-curl-8.0.30-150400.4.40.1 Container bci/php:latest:php8-mbstring-8.0.30-150400.4.40.1 Container bci/php:latest:php8-openssl-8.0.30-150400.4.40.1 Container bci/php:latest:php8-phar-8.0.30-150400.4.40.1 Container bci/php:latest:php8-readline-8.0.30-150400.4.40.1 Container bci/php:latest:php8-zip-8.0.30-150400.4.40.1 Container bci/php:latest:php8-zlib-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:apache2-mod_php8-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-bcmath-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-bz2-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-calendar-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-cli-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-ctype-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-curl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-dba-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-devel-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-dom-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-embed-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-enchant-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-exif-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-fastcgi-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-fileinfo-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-fpm-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-ftp-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-gd-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-gettext-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-gmp-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-iconv-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-intl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-ldap-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-mbstring-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-mysql-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-odbc-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-opcache-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-openssl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-pcntl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-pdo-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-pgsql-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-phar-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-posix-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-readline-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-shmop-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-snmp-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-soap-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sockets-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sodium-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sqlite-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sysvmsg-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sysvsem-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-sysvshm-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-test-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-tidy-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-tokenizer-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-xmlreader-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-xmlwriter-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-xsl-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-zip-8.0.30-150400.4.40.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:php8-zlib-8.0.30-150400.4.40.1 openSUSE Leap 15.5:apache2-mod_php8-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-bcmath-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-bz2-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-calendar-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-cli-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-ctype-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-curl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-dba-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-devel-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-dom-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-embed-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-enchant-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-exif-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-fastcgi-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-fileinfo-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-fpm-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-ftp-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-gd-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-gettext-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-gmp-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-iconv-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-intl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-ldap-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-mbstring-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-mysql-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-odbc-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-opcache-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-openssl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-pcntl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-pdo-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-pgsql-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-phar-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-posix-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-readline-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-shmop-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-snmp-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-soap-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sockets-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sodium-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sqlite-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sysvmsg-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sysvsem-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-sysvshm-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-test-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-tidy-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-tokenizer-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-xmlreader-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-xmlwriter-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-xsl-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-zip-8.0.30-150400.4.40.1 openSUSE Leap 15.5:php8-zlib-8.0.30-150400.4.40.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20241446-1/ https://www.suse.com/security/cve/CVE-2024-3096.html CVE-2024-3096 https://bugzilla.suse.com/1222858 SUSE Bug 1222858