{"id":"CLSA-2025-1758289909","summary":"Fix CVE(s): CVE-2025-1735, CVE-2025-1736","details":"   * SECURITY UPDATE: Inadequate validation in pgsql and pdo_pgsql functions\n     - debian/patches/CVE-2025-1735.patch: add error checks for escape function\n       in pgsql and pdo_pgsql extensions to prevent potential security issues\n     - CVE-2025-1735\n   * SECURITY UPDATE: Insufficient HTTP header validation\n     - debian/patches/CVE-2025-1736.patch: updates the http user header check\n       for crlf in ext/standard/http_fopen_wrapper.c\n     - CVE-2025-1736","modified":"2026-06-04T09:47:34.114827949Z","published":"2025-09-23T14:56:50Z","upstream":["CVE-2025-1735","CVE-2025-1736"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1758289909.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"libphp7.4-embed","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libphp7.4-embed?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-bcmath","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bcmath?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-bz2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bz2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-cgi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cgi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-cli","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cli?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-curl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-curl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-dba","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dba?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-enchant","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-enchant?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-fpm","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-fpm?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-gd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-gmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-imap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-imap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-interbase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-interbase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-intl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-intl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-json","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-json?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-mbstring","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mbstring?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-odbc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-odbc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-opcache","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-opcache?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-phpdbg","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-phpdbg?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-pspell","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pspell?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-readline","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-readline?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-snmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-snmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-soap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-soap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-sqlite3","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sqlite3?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-sybase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sybase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-tidy","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-tidy?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-xml","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xml?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-xmlrpc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xmlrpc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-xsl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xsl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}},{"package":{"name":"php7.4-zip","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-zip?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1758289909.json"}}],"schema_version":"1.7.5"}