<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for php74</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:2161-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-06-23T08:15:38Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-06-23T08:15:38Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-06-23T08:15:38Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for php74</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for php74 fixes the following issues:

- CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645)
- CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (bsc#1200628).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2022-2161,SUSE-SLE-Module-Web-Scripting-12-2022-2161,SUSE-SLE-SDK-12-SP5-2022-2161</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20222161-1/</URL>
      <Description>Link for SUSE-SU-2022:2161-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-June/011335.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:2161-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1200628</URL>
      <Description>SUSE Bug 1200628</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1200645</URL>
      <Description>SUSE Bug 1200645</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-31625/</URL>
      <Description>SUSE CVE CVE-2022-31625 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-31626/</URL>
      <Description>SUSE CVE CVE-2022-31626 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Web and Scripting 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Web and Scripting 12">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12" CPE="cpe:/o:suse:sle-module-web-scripting:12">SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5" CPE="cpe:/o:suse:sle-sdk:12:sp5">SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="apache2-mod_php74-7.4.6-1.42.1">
      <FullProductName ProductID="apache2-mod_php74-7.4.6-1.42.1">apache2-mod_php74-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-7.4.6-1.42.1">
      <FullProductName ProductID="php74-7.4.6-1.42.1">php74-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-bcmath-7.4.6-1.42.1">
      <FullProductName ProductID="php74-bcmath-7.4.6-1.42.1">php74-bcmath-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-bz2-7.4.6-1.42.1">
      <FullProductName ProductID="php74-bz2-7.4.6-1.42.1">php74-bz2-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-calendar-7.4.6-1.42.1">
      <FullProductName ProductID="php74-calendar-7.4.6-1.42.1">php74-calendar-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-ctype-7.4.6-1.42.1">
      <FullProductName ProductID="php74-ctype-7.4.6-1.42.1">php74-ctype-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-curl-7.4.6-1.42.1">
      <FullProductName ProductID="php74-curl-7.4.6-1.42.1">php74-curl-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-dba-7.4.6-1.42.1">
      <FullProductName ProductID="php74-dba-7.4.6-1.42.1">php74-dba-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-devel-7.4.6-1.42.1">
      <FullProductName ProductID="php74-devel-7.4.6-1.42.1">php74-devel-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-dom-7.4.6-1.42.1">
      <FullProductName ProductID="php74-dom-7.4.6-1.42.1">php74-dom-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-embed-7.4.6-1.42.1">
      <FullProductName ProductID="php74-embed-7.4.6-1.42.1">php74-embed-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-enchant-7.4.6-1.42.1">
      <FullProductName ProductID="php74-enchant-7.4.6-1.42.1">php74-enchant-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-exif-7.4.6-1.42.1">
      <FullProductName ProductID="php74-exif-7.4.6-1.42.1">php74-exif-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-fastcgi-7.4.6-1.42.1">
      <FullProductName ProductID="php74-fastcgi-7.4.6-1.42.1">php74-fastcgi-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-fileinfo-7.4.6-1.42.1">
      <FullProductName ProductID="php74-fileinfo-7.4.6-1.42.1">php74-fileinfo-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-firebird-7.4.6-1.42.1">
      <FullProductName ProductID="php74-firebird-7.4.6-1.42.1">php74-firebird-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-fpm-7.4.6-1.42.1">
      <FullProductName ProductID="php74-fpm-7.4.6-1.42.1">php74-fpm-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-ftp-7.4.6-1.42.1">
      <FullProductName ProductID="php74-ftp-7.4.6-1.42.1">php74-ftp-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-gd-7.4.6-1.42.1">
      <FullProductName ProductID="php74-gd-7.4.6-1.42.1">php74-gd-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-gettext-7.4.6-1.42.1">
      <FullProductName ProductID="php74-gettext-7.4.6-1.42.1">php74-gettext-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-gmp-7.4.6-1.42.1">
      <FullProductName ProductID="php74-gmp-7.4.6-1.42.1">php74-gmp-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-iconv-7.4.6-1.42.1">
      <FullProductName ProductID="php74-iconv-7.4.6-1.42.1">php74-iconv-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-intl-7.4.6-1.42.1">
      <FullProductName ProductID="php74-intl-7.4.6-1.42.1">php74-intl-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-json-7.4.6-1.42.1">
      <FullProductName ProductID="php74-json-7.4.6-1.42.1">php74-json-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-ldap-7.4.6-1.42.1">
      <FullProductName ProductID="php74-ldap-7.4.6-1.42.1">php74-ldap-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-mbstring-7.4.6-1.42.1">
      <FullProductName ProductID="php74-mbstring-7.4.6-1.42.1">php74-mbstring-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-mysql-7.4.6-1.42.1">
      <FullProductName ProductID="php74-mysql-7.4.6-1.42.1">php74-mysql-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-odbc-7.4.6-1.42.1">
      <FullProductName ProductID="php74-odbc-7.4.6-1.42.1">php74-odbc-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-opcache-7.4.6-1.42.1">
      <FullProductName ProductID="php74-opcache-7.4.6-1.42.1">php74-opcache-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-openssl-7.4.6-1.42.1">
      <FullProductName ProductID="php74-openssl-7.4.6-1.42.1">php74-openssl-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-pcntl-7.4.6-1.42.1">
      <FullProductName ProductID="php74-pcntl-7.4.6-1.42.1">php74-pcntl-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-pdo-7.4.6-1.42.1">
      <FullProductName ProductID="php74-pdo-7.4.6-1.42.1">php74-pdo-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-pgsql-7.4.6-1.42.1">
      <FullProductName ProductID="php74-pgsql-7.4.6-1.42.1">php74-pgsql-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-phar-7.4.6-1.42.1">
      <FullProductName ProductID="php74-phar-7.4.6-1.42.1">php74-phar-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-posix-7.4.6-1.42.1">
      <FullProductName ProductID="php74-posix-7.4.6-1.42.1">php74-posix-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-readline-7.4.6-1.42.1">
      <FullProductName ProductID="php74-readline-7.4.6-1.42.1">php74-readline-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-shmop-7.4.6-1.42.1">
      <FullProductName ProductID="php74-shmop-7.4.6-1.42.1">php74-shmop-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-snmp-7.4.6-1.42.1">
      <FullProductName ProductID="php74-snmp-7.4.6-1.42.1">php74-snmp-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-soap-7.4.6-1.42.1">
      <FullProductName ProductID="php74-soap-7.4.6-1.42.1">php74-soap-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sockets-7.4.6-1.42.1">
      <FullProductName ProductID="php74-sockets-7.4.6-1.42.1">php74-sockets-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sodium-7.4.6-1.42.1">
      <FullProductName ProductID="php74-sodium-7.4.6-1.42.1">php74-sodium-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sqlite-7.4.6-1.42.1">
      <FullProductName ProductID="php74-sqlite-7.4.6-1.42.1">php74-sqlite-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sysvmsg-7.4.6-1.42.1">
      <FullProductName ProductID="php74-sysvmsg-7.4.6-1.42.1">php74-sysvmsg-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sysvsem-7.4.6-1.42.1">
      <FullProductName ProductID="php74-sysvsem-7.4.6-1.42.1">php74-sysvsem-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-sysvshm-7.4.6-1.42.1">
      <FullProductName ProductID="php74-sysvshm-7.4.6-1.42.1">php74-sysvshm-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-test-7.4.6-1.42.1">
      <FullProductName ProductID="php74-test-7.4.6-1.42.1">php74-test-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-tidy-7.4.6-1.42.1">
      <FullProductName ProductID="php74-tidy-7.4.6-1.42.1">php74-tidy-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-tokenizer-7.4.6-1.42.1">
      <FullProductName ProductID="php74-tokenizer-7.4.6-1.42.1">php74-tokenizer-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xmlreader-7.4.6-1.42.1">
      <FullProductName ProductID="php74-xmlreader-7.4.6-1.42.1">php74-xmlreader-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xmlrpc-7.4.6-1.42.1">
      <FullProductName ProductID="php74-xmlrpc-7.4.6-1.42.1">php74-xmlrpc-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xmlwriter-7.4.6-1.42.1">
      <FullProductName ProductID="php74-xmlwriter-7.4.6-1.42.1">php74-xmlwriter-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-xsl-7.4.6-1.42.1">
      <FullProductName ProductID="php74-xsl-7.4.6-1.42.1">php74-xsl-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-zip-7.4.6-1.42.1">
      <FullProductName ProductID="php74-zip-7.4.6-1.42.1">php74-zip-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="php74-zlib-7.4.6-1.42.1">
      <FullProductName ProductID="php74-zlib-7.4.6-1.42.1">php74-zlib-7.4.6-1.42.1</FullProductName>
    </Branch>
    <Relationship ProductReference="apache2-mod_php74-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php74-7.4.6-1.42.1">apache2-mod_php74-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-7.4.6-1.42.1">php74-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-bcmath-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-bcmath-7.4.6-1.42.1">php74-bcmath-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-bz2-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-bz2-7.4.6-1.42.1">php74-bz2-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-calendar-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-calendar-7.4.6-1.42.1">php74-calendar-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-ctype-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-ctype-7.4.6-1.42.1">php74-ctype-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-curl-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-curl-7.4.6-1.42.1">php74-curl-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-dba-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-dba-7.4.6-1.42.1">php74-dba-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-dom-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-dom-7.4.6-1.42.1">php74-dom-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-enchant-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-enchant-7.4.6-1.42.1">php74-enchant-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-exif-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-exif-7.4.6-1.42.1">php74-exif-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-fastcgi-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-fastcgi-7.4.6-1.42.1">php74-fastcgi-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-fileinfo-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-fileinfo-7.4.6-1.42.1">php74-fileinfo-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-fpm-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-fpm-7.4.6-1.42.1">php74-fpm-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-ftp-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-ftp-7.4.6-1.42.1">php74-ftp-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-gd-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-gd-7.4.6-1.42.1">php74-gd-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-gettext-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-gettext-7.4.6-1.42.1">php74-gettext-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-gmp-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-gmp-7.4.6-1.42.1">php74-gmp-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-iconv-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-iconv-7.4.6-1.42.1">php74-iconv-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-intl-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-intl-7.4.6-1.42.1">php74-intl-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-json-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-json-7.4.6-1.42.1">php74-json-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-ldap-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-ldap-7.4.6-1.42.1">php74-ldap-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-mbstring-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-mbstring-7.4.6-1.42.1">php74-mbstring-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-mysql-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-mysql-7.4.6-1.42.1">php74-mysql-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-odbc-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-odbc-7.4.6-1.42.1">php74-odbc-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-opcache-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-opcache-7.4.6-1.42.1">php74-opcache-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-openssl-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-openssl-7.4.6-1.42.1">php74-openssl-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-pcntl-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-pcntl-7.4.6-1.42.1">php74-pcntl-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-pdo-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-pdo-7.4.6-1.42.1">php74-pdo-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-pgsql-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-pgsql-7.4.6-1.42.1">php74-pgsql-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-phar-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-phar-7.4.6-1.42.1">php74-phar-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-posix-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-posix-7.4.6-1.42.1">php74-posix-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-readline-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-readline-7.4.6-1.42.1">php74-readline-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-shmop-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-shmop-7.4.6-1.42.1">php74-shmop-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-snmp-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-snmp-7.4.6-1.42.1">php74-snmp-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-soap-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-soap-7.4.6-1.42.1">php74-soap-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sockets-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sockets-7.4.6-1.42.1">php74-sockets-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sodium-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sodium-7.4.6-1.42.1">php74-sodium-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sqlite-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sqlite-7.4.6-1.42.1">php74-sqlite-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sysvmsg-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvmsg-7.4.6-1.42.1">php74-sysvmsg-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sysvsem-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvsem-7.4.6-1.42.1">php74-sysvsem-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-sysvshm-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvshm-7.4.6-1.42.1">php74-sysvshm-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-tidy-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-tidy-7.4.6-1.42.1">php74-tidy-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-tokenizer-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-tokenizer-7.4.6-1.42.1">php74-tokenizer-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xmlreader-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlreader-7.4.6-1.42.1">php74-xmlreader-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xmlrpc-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlrpc-7.4.6-1.42.1">php74-xmlrpc-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xmlwriter-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlwriter-7.4.6-1.42.1">php74-xmlwriter-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-xsl-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-xsl-7.4.6-1.42.1">php74-xsl-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-zip-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-zip-7.4.6-1.42.1">php74-zip-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-zlib-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Web and Scripting 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Web and Scripting 12:php74-zlib-7.4.6-1.42.1">php74-zlib-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="php74-devel-7.4.6-1.42.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5:php74-devel-7.4.6-1.42.1">php74-devel-7.4.6-1.42.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.</Note>
    </Notes>
    <CVE>CVE-2022-31625</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php74-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bcmath-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bz2-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-calendar-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ctype-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-curl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dba-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dom-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-enchant-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-exif-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fastcgi-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fileinfo-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fpm-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ftp-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gd-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gettext-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gmp-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-iconv-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-intl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-json-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ldap-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mbstring-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mysql-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-odbc-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-opcache-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-openssl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pcntl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pdo-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pgsql-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-phar-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-posix-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-readline-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-shmop-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-snmp-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-soap-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sockets-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sodium-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sqlite-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvmsg-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvsem-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvshm-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tidy-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tokenizer-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlreader-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlrpc-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlwriter-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xsl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zip-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zlib-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:php74-devel-7.4.6-1.42.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20222161-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-31625.html</URL>
        <Description>CVE-2022-31625</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1200645</URL>
        <Description>SUSE Bug 1200645</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-31626</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php74-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bcmath-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-bz2-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-calendar-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ctype-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-curl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dba-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-dom-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-enchant-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-exif-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fastcgi-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fileinfo-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-fpm-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ftp-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gd-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gettext-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-gmp-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-iconv-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-intl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-json-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-ldap-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mbstring-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-mysql-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-odbc-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-opcache-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-openssl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pcntl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pdo-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-pgsql-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-phar-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-posix-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-readline-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-shmop-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-snmp-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-soap-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sockets-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sodium-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sqlite-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvmsg-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvsem-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-sysvshm-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tidy-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-tokenizer-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlreader-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlrpc-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xmlwriter-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-xsl-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zip-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Web and Scripting 12:php74-zlib-7.4.6-1.42.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:php74-devel-7.4.6-1.42.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:S/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20222161-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-31626.html</URL>
        <Description>CVE-2022-31626</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1200628</URL>
        <Description>SUSE Bug 1200628</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
