p PatchFirst

SUSE-SU-2026:3165-1

SUSE-SU-2026:3165-1 · Security update for php7

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for php7 fixes the following issue - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw (bsc#1270351).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • apache2-mod_php7 SUSE:Linux Enterprise Module for Legacy 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

  • php7 SUSE:Linux Enterprise Module for Legacy 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

  • apache2-mod_php7 SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

  • php7 SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

  • php7-embed SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

  • php7-fastcgi SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

  • php7-fpm SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

  • php7-test SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 7.4.33-150400.4.63.1

    Update to 7.4.33-150400.4.63.1

Original sources

Check your server →