SQL injection in PHP - CVE-2025-14179

Vulnerability identifier: #VU130912

CSH Severity: High

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-14179

CWE-ID: CWE-89

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary SQL commands.

The vulnerability exists due to SQL injection in PDO_Firebird quoted string handling when processing NUL bytes in quoted strings. A remote attacker can supply crafted input containing NUL bytes to execute arbitrary SQL commands.

PHP
Debian Linux
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
Fedora
Web and Scripting Module
openSUSE Leap
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
openEuler
SecurityCenter
EasyApache
php7.0 (Ubuntu package)
php-extras
php-ldap
php
php-mbstring
php-mysqlnd
php-odbc
php-opcache
php-pdo
php-pgsql
php-process
php-snmp
php-soap
php-sodium
php-tidy
php-xml
php-help
php-debugsource
php-intl
php-gmp
php-gd
php-fpm
php-ffi
php-enchant
php-embedded
php-devel
php-debuginfo
php-dbg
php-dba
php-common
php-cli
php-bcmath
php8-gettext
php8-tidy-debuginfo
php8-pdo-debuginfo
php8-sysvsem-debuginfo
php8-debuginfo
php8-shmop
php8-ldap
php8-sqlite
php8-sysvsem
php8-ldap-debuginfo
php8-opcache
php8-embed-debuginfo
php8-mysql
php8-sysvmsg
apache2-mod_php8-debugsource
php8-ctype
php8-fpm-debugsource
php8-bcmath
php8-devel
php8-tidy
php8-openssl-debuginfo
apache2-mod_php8-debuginfo
php8-gmp-debuginfo
php8-curl
php8-iconv
php8-dba
apache2-mod_php8
php8-pgsql
php8-fastcgi-debugsource
php8-zlib
php8-phar-debuginfo
php8-posix
php8-intl
php8-xmlreader
php8-readline-debuginfo
php8-gd-debuginfo
php8-calendar-debuginfo
php8-opcache-debuginfo
php8-phar
php8-sodium-debuginfo
php8-zip-debuginfo
php8
php8-calendar
php8-xmlreader-debuginfo
php8-bz2-debuginfo
php8-sysvshm-debuginfo
php8-sysvmsg-debuginfo
php8-zip
php8-xsl
php8-tokenizer-debuginfo
php8-pcntl-debuginfo
php8-sockets
php8-cli-debuginfo
php8-fileinfo-debuginfo
php8-intl-debuginfo
php8-dba-debuginfo
php8-enchant
php8-dom
php8-mbstring
php8-pcntl
php8-pdo
php8-fpm
php8-tokenizer
php8-ctype-debuginfo
php8-soap
php8-iconv-debuginfo
php8-cli
php8-bz2
php8-exif-debuginfo
php8-pgsql-debuginfo
php8-xmlwriter-debuginfo
php8-embed
php8-gmp
php8-posix-debuginfo
php8-mysql-debuginfo
php8-curl-debuginfo
php8-sysvshm
php8-dom-debuginfo
php8-snmp-debuginfo
php8-fastcgi
php8-enchant-debuginfo
php8-embed-debugsource
php8-xsl-debuginfo
php8-fpm-debuginfo
php8-gd
php8-openssl
php8-readline
php8-ftp
php8-zlib-debuginfo
php8-soap-debuginfo
php8-bcmath-debuginfo
php8-mbstring-debuginfo
php8-ftp-debuginfo
php8-odbc-debuginfo
php8-gettext-debuginfo
php8-sodium
php8-shmop-debuginfo
php8-fastcgi-debuginfo
php8-sqlite-debuginfo
php8-sockets-debuginfo
php8-fileinfo
php8-odbc
php8-snmp
php8-debugsource
php8-xmlwriter
php8-exif
php8-test
php8.1 (Ubuntu package)
php8.2 (Debian package)
php8-ffi
php8-ffi-debuginfo
php8-fpm-apache
php8.4-extras
php8.4 (Debian package)

Install security update from vendor's website.

PHP - addressed in versions 8.2.31, 8.3.31, 8.4.21, 8.5.6
SecurityCenter - addressed in versions SC202607.1, SC202607.2
EasyApache - update to 4 25-58
php7.0 (Ubuntu package) - update to 7.0.33-0ubuntu0.16.04.16+esm19
php-extras - addressed in versions 8.0.30-3.el9, 8.3.31-1.el10_2, 8.3.31-1.el10_3
php-ldap - addressed in versions 8.0.30-13, 8.3.31-1
php - addressed in versions 8.0.30-13, 8.3.31-1
php-mbstring - addressed in versions 8.0.30-13, 8.3.31-1
php-mysqlnd - addressed in versions 8.0.30-13, 8.3.31-1
php-odbc - addressed in versions 8.0.30-13, 8.3.31-1
php-opcache - addressed in versions 8.0.30-13, 8.3.31-1
php-pdo - addressed in versions 8.0.30-13, 8.3.31-1
php-pgsql - addressed in versions 8.0.30-13, 8.3.31-1
php-process - addressed in versions 8.0.30-13, 8.3.31-1
php-snmp - addressed in versions 8.0.30-13, 8.3.31-1
php-soap - addressed in versions 8.0.30-13, 8.3.31-1
php-sodium - addressed in versions 8.0.30-13, 8.3.31-1
php-tidy - addressed in versions 8.0.30-13, 8.3.31-1
php-xml - addressed in versions 8.0.30-13, 8.3.31-1
php-help - addressed in versions 8.0.30-13, 8.3.31-1
php-debugsource - addressed in versions 8.0.30-13, 8.3.31-1
php-intl - addressed in versions 8.0.30-13, 8.3.31-1
php-gmp - addressed in versions 8.0.30-13, 8.3.31-1
php-gd - addressed in versions 8.0.30-13, 8.3.31-1
php-fpm - addressed in versions 8.0.30-13, 8.3.31-1
php-ffi - addressed in versions 8.0.30-13, 8.3.31-1
php-enchant - addressed in versions 8.0.30-13, 8.3.31-1
php-embedded - addressed in versions 8.0.30-13, 8.3.31-1
php-devel - addressed in versions 8.0.30-13, 8.3.31-1
php-debuginfo - addressed in versions 8.0.30-13, 8.3.31-1
php-dbg - addressed in versions 8.0.30-13, 8.3.31-1
php-dba - addressed in versions 8.0.30-13, 8.3.31-1
php-common - addressed in versions 8.0.30-13, 8.3.31-1
php-cli - addressed in versions 8.0.30-13, 8.3.31-1
php-bcmath - addressed in versions 8.0.30-13, 8.3.31-1
php8-gettext - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-tidy-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-pdo-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sysvsem-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-shmop - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-ldap - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sqlite - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sysvsem - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-ldap-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-opcache - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-embed-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-mysql - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sysvmsg - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
apache2-mod_php8-debugsource - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-ctype - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fpm-debugsource - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-bcmath - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-devel - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-tidy - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-openssl-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
apache2-mod_php8-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-gmp-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-curl - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-iconv - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-dba - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
apache2-mod_php8 - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-pgsql - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fastcgi-debugsource - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-zlib - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-phar-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-posix - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-intl - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-xmlreader - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-readline-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-gd-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-calendar-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-opcache-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-phar - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sodium-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-zip-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8 - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-calendar - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-xmlreader-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-bz2-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sysvshm-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sysvmsg-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-zip - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-xsl - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-tokenizer-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-pcntl-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sockets - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-cli-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fileinfo-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-intl-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-dba-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-enchant - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-dom - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-mbstring - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-pcntl - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-pdo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fpm - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-tokenizer - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-ctype-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-soap - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-iconv-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-cli - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-bz2 - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-exif-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-pgsql-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-xmlwriter-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-embed - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-gmp - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-posix-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-mysql-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-curl-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sysvshm - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-dom-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-snmp-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fastcgi - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-enchant-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-embed-debugsource - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-xsl-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fpm-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-gd - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-openssl - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-readline - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-ftp - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-zlib-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-soap-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-bcmath-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-mbstring-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-ftp-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-odbc-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-gettext-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sodium - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-shmop-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fastcgi-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sqlite-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-sockets-debuginfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-fileinfo - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-odbc - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-snmp - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-debugsource - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-xmlwriter - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-exif - addressed in versions 8.0.30-150400.4.65.1, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1, 8.4.21-160000.1.1
php8-test - addressed in versions 8.0.30-150400.4.65.2, 8.2.31-150600.3.28.1, 8.3.31-150700.3.12.1
php8.1 (Ubuntu package) - addressed in versions 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1
php8.2 (Debian package) - update to 8.2.31-1~deb12u1
php8-ffi - addressed in versions 8.2.31-150600.3.28.1, 8.4.21-160000.1.1
php8-ffi-debuginfo - addressed in versions 8.2.31-150600.3.28.1, 8.4.21-160000.1.1
php8-fpm-apache - addressed in versions 8.2.31-150600.3.28.1, 8.4.21-160000.1.1
php8.4-extras - addressed in versions 8.4.21-1.el10_2, 8.4.21-1.el10_3
php8.4 (Debian package) - update to 8.4.21-1~deb13u1

• https://www.php.net/ChangeLog-8.php#8.5.6

• Multiple vulnerabilities in PHP
• CPanel EasyApache update for PHP
• Debian update for php8.2
• Debian update for php8.4
• SUSE update for php8
• openEuler 24.03 LTS SP3 update for php
• openEuler 24.03 LTS SP1 update for php
• openEuler 24.03 LTS update for php
• SUSE update for php8
• SUSE update for php8
• SUSE update for php8
• openEuler 22.03 LTS SP4 update for php
• openEuler 20.03 LTS SP4 update for php
• Ubuntu update for php8.1
• Fedora EPEL 9 update for php-extras
• Fedora EPEL 10.2 update for php8.4-extras
• Fedora EPEL 10.3 update for php8.4-extras
• Fedora EPEL 10.3 update for php-extras
• Fedora EPEL 10.2 update for php-extras
• Ubuntu update for php7.0
• Multiple vulnerabilities in Tenable Security Center
• Tenable Security Center on Enclave Security update for third-party components