{"id":"CLSA-2025-1761577285","summary":"Fix of 5 CVEs","details":"   * SECURITY UPDATE: out-of-bounds access\n     - debian/patches/CVE-2017-9118.patch: fix out of bounds access in php_pcre_replace_impl\n     - CVE-2017-9118\n   * SECURITY UPDATE: improper validation of HTTP_REDIRECT_STATUS variable in CGI\n     binary\n     - debian/patches/CVE-2024-8927.patch: fix Apache server name check; remove\n       references to redirect.so and Netscape; check configuration override first\n     - CVE-2024-8927\n   * SECURITY UPDATE: buffer overread vulnerability\n     - debian/patches/CVE-2024-11233.patch: move bound check upwards to fix\n       single byte overread with convert.quoted-printable-decode filter\n     - CVE-2024-11233\n   * SECURITY UPDATE: URI is not properly sanitized\n     - debian/patches/CVE-2024-11234.patch: when using streams with configured\n       proxy and \"request_fulluri\" option, the URI is not properly sanitized which\n       can lead to HTTP request smuggling and allow the attacker to use the proxy to\n       perform arbitrary HTTP requests originating from the server, thus potentially\n       gaining access to resources not normally available to the external user\n     - CVE-2024-11234\n   * SECURITY UPDATE: incomplete check in escaping functions\n     - debian/patches/CVE-2025-1735.patch: pgsql and pdo_pgsql escaping functions do\n       not check if the underlying quoting functions returned errors. This could cause\n       crashes if Postgres server rejects the string as invalid.\n     - CVE-2025-1735","modified":"2026-06-04T10:04:09.502716004Z","published":"2025-10-27T15:01:32Z","upstream":["CVE-2017-9118","CVE-2024-11233","CVE-2024-11234","CVE-2024-8927","CVE-2025-1735"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761577285.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"libphp7.3-embed","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libphp7.3-embed?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-bcmath","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bcmath?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-bz2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bz2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-cgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-cli","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cli?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-curl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-curl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-dba","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dba?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-enchant","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-enchant?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-fpm","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-fpm?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-gd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-gmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-imap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-imap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-interbase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-interbase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-intl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-intl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-json","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-json?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-ldap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-ldap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-mbstring","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mbstring?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-mysql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mysql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-odbc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-odbc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-opcache","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-opcache?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-pgsql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pgsql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-phpdbg","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-phpdbg?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-pspell","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pspell?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-readline","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-readline?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-recode","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-recode?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-snmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-snmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-soap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-soap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-sqlite3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sqlite3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-sybase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sybase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-tidy","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-tidy?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-xml","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xml?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-xmlrpc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xmlrpc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-xsl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xsl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}},{"package":{"name":"php7.3-zip","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-zip?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761577285.json"}}],"schema_version":"1.7.5"}