{"id":"CLSA-2025-1761082274","summary":"Fix of 5 CVEs","details":"   * SECURITY UPDATE: out-of-bound write\n     - debian/patches/CVE-2024-11236: fix integer overflow causing in an out-of-bounds write\n       ldap_escape()\n     - CVE-2024-11236\n   * SECURITY UPDATE: incorrect URL truncation\n     - debian/patches/CVE-2025-1861: fix possible incorrect URL truncation and\n       redirecting to a wrong location\n     - CVE-2025-1217\n     - CVE-2025-1734\n     - CVE-2025-1861\n   * SECURITY UPDATE: inadequate validation of user-supplied headers may lead to\n     header misinterpretation\n     - debian/patches/CVE-2025-1736.patch: Fix GHSA-hgf5-96fm-v528: Correct http\n       user header CRLF check\n     - CVE-2025-1736","modified":"2026-06-04T10:03:20.830602989Z","published":"2025-10-21T21:31:18Z","upstream":["CVE-2024-11236","CVE-2025-1217","CVE-2025-1734","CVE-2025-1736","CVE-2025-1861"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761082274.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"libphp7.3-embed","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libphp7.3-embed?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-bcmath","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bcmath?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-bz2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bz2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-cgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-cli","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cli?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-curl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-curl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-dba","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dba?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-enchant","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-enchant?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-fpm","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-fpm?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-gd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-gmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-imap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-imap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-interbase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-interbase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-intl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-intl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-json","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-json?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-ldap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-ldap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-mbstring","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mbstring?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-mysql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mysql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-odbc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-odbc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-opcache","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-opcache?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-pgsql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pgsql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-phpdbg","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-phpdbg?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-pspell","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pspell?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-readline","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-readline?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-recode","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-recode?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-snmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-snmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-soap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-soap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-sqlite3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sqlite3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-sybase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sybase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-tidy","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-tidy?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-xml","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xml?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-xmlrpc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xmlrpc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-xsl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xsl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}},{"package":{"name":"php7.3-zip","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-zip?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761082274.json"}}],"schema_version":"1.7.5"}