SUSE-SU-2026:0245-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:0245-1

UNKNOWN

Security update for php7

Published Jan 22, 2026

Modified 1 months ago

Fix available

Details

This update for php7 fixes the following issues:

Security fixes:

CVE-2025-14178: heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE (bsc#1255711).

Other fixes:

Add all php7 packages to PackageHUB (unsupported), no source changes. (bsc#1251932)

Affected Packages(54 packages)

apache2-mod_php7

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Module for Legacy 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

7.4.33-150400.4.55.1

php7

Fixed in:

7.4.33-150400.4.55.1

php7-bcmath

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Server 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP5-LTSS

Fixed in:

7.4.33-150400.4.55.1

php7-bz2

Fixed in:

7.4.33-150400.4.55.1

php7-calendar

Fixed in:

7.4.33-150400.4.55.1

php7-cli

Fixed in:

7.4.33-150400.4.55.1

php7-ctype

Fixed in:

7.4.33-150400.4.55.1

php7-curl

Fixed in:

7.4.33-150400.4.55.1

php7-dba

Fixed in:

7.4.33-150400.4.55.1

php7-devel

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP6-LTSS

Fixed in:

7.4.33-150400.4.55.1

References

REPORT

https://bugzilla.suse.com/1255711

WEB

https://www.suse.com/security/cve/CVE-2025-14178

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260245-1/

Upstream

CVE-2025-14178

Ecosystems(11)

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 15 SP4-LTSS

Timeline

PublishedJan 22, 2026

ModifiedJan 22, 2026