{"id":"CLSA-2025-1757014652","summary":"Fix CVE(s): CVE-2025-1217, CVE-2025-1734, CVE-2025-1736, CVE-2025-1861","details":"   * SECURITY UPDATE: misinterpretation of HTTP response headers\n     - debian/patches/CVE-2025-1217.patch: adds HTTP header folding support\n       for HTTP wrapper response headers in ext/standard/http_fopen_wrapper.c\n     - CVE-2025-1217\n   * SECURITY UPDATE: insufficient HTTP header validation\n     - debian/patches/CVE-2025-1734.patch: adds logic to fail invalid HTTP\n       headers in ext/standard/http_fopen_wrapper.c\n     - CVE-2025-1734\n   * SECURITY UPDATE: http redirect location truncation\n     - debian/patches/CVE-2025-1861.patch: converts the allocation of location\n       to be on heap instead of stack and errors if the location length is\n       greater than 8086 bytes in ext/standard/http_fopen_wrapper.c\n     - CVE-2025-1861\n   * SECURITY UPDATE: insufficient HTTP header validation\n     - debian/patches/CVE-2025-1736.patch: updates the http user header check\n       for crlf in ext/standard/http_fopen_wrapper.c\n     - CVE-2025-1736","modified":"2026-06-04T09:45:57.040041437Z","published":"2025-09-04T19:37:36Z","upstream":["CVE-2025-1217","CVE-2025-1734","CVE-2025-1736","CVE-2025-1861"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1757014652.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"libphp7.2-embed","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libphp7.2-embed?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-bcmath","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-bcmath?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-bz2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-bz2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-cgi","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-cgi?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-cli","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-cli?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-curl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-curl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-dba","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-dba?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-enchant","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-enchant?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-fpm","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-fpm?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-gd","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-gd?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-gmp","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-gmp?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-imap","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-imap?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-interbase","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-interbase?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-intl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-intl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-json","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-json?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-ldap","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-ldap?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-mbstring","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-mbstring?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-mysql","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-mysql?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-odbc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-odbc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-opcache","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-opcache?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-pgsql","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-pgsql?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-phpdbg","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-phpdbg?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-pspell","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-pspell?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-readline","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-readline?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-recode","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-recode?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-snmp","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-snmp?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-soap","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-soap?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-sqlite3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-sqlite3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-sybase","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-sybase?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-tidy","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-tidy?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-xml","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-xml?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-xmlrpc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-xmlrpc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-xsl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-xsl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}},{"package":{"name":"php7.2-zip","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/php7.2-zip?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.17+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1757014652.json"}}],"schema_version":"1.7.5"}