CVE catalog

CVE-2024-2756

php8.2: CVE-2024-2756

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
38.12% · Oct 25, 2026

Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianphp8.2bookworm8.2.32-1~deb12u1fixed
Debianphp8.2bookworm-security8.2.35-1~deb12u1fixed
Ubuntuphp5pro5.5.3+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.3+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.8+dfsg-2ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.7vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.9vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.19vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.20vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.21vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.22vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.23vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.24vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.25vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.26vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.27vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm8vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm10vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm15vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm18vulnerable
Ubuntuphp7.0pro7.0.1-5vulnerable
Ubuntuphp7.0pro7.0.1-6vulnerable
Ubuntuphp7.0pro7.0.2-1vulnerable
Ubuntuphp7.0pro7.0.2-3vulnerable
Ubuntuphp7.0pro7.0.2-4vulnerable
Ubuntuphp7.0pro7.0.2-5vulnerable
Ubuntuphp7.0pro7.0.3-2vulnerable
Ubuntuphp7.0pro7.0.3-3vulnerable
Ubuntuphp7.0pro7.0.3-9ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.13-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.18-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.22-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.25-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.28-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.30-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.32-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.11vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.12vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.14vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.15vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm8vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm9fixed
Ubuntuphp7.2pro7.2.1-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.3-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.5-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.10-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.17-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.3vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.4vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.6vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.7vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.8vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.9vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.10vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.11vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.12vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.13vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.15vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.16vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm3fixed
Ubuntuphp7.420.047.4.3-4build1vulnerable
Ubuntuphp7.420.047.4.3-4build2vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu1vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu1.1vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.2vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.4vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.5vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.6vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.7vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.8vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.9vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.10vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.11vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.12vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.13vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.15vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.16vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.17vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.18vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.19vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.20vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.22fixed
Ubuntuphp8.122.048.1.0~rc4-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.0-1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.3vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.4vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.5vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.6vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.8vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.9vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.10vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.11vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.13vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.14vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.15vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.17fixed
Ubuntuphp8.324.048.3.0-1vulnerable
Ubuntuphp8.324.048.3.0-1ubuntu1vulnerable
Ubuntuphp8.324.048.3.4-1vulnerable
Ubuntuphp8.324.048.3.4-1build1vulnerable
Ubuntuphp8.324.048.3.6-0maysync1fixed
Suseapache2-mod_php7linux enterprise module for legacy 15 sp57.4.33-150400.4.34.1fixed
Susephp7linux enterprise module for legacy 15 sp57.4.33-150400.4.34.1fixed
Susephp7-fastcgilinux enterprise module for legacy 15 sp57.4.33-150400.4.34.1fixed
Susephp7-fpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.34.1fixed
Susephp7-embedlinux enterprise module for package hub 15 sp57.4.33-150400.4.34.1fixed
Opensuseapache2-mod_php7leap 15.57.4.33-150400.4.34.1fixed
Opensusephp7leap 15.57.4.33-150400.4.34.1fixed
Opensusephp7-embedleap 15.57.4.33-150400.4.34.1fixed
Opensusephp7-fastcgileap 15.57.4.33-150400.4.34.1fixed
Opensusephp7-fpmleap 15.57.4.33-150400.4.34.1fixed
Opensusephp7-testleap 15.57.4.33-150400.4.34.1fixed
Susephp7linux enterprise high performance computing 15 sp2-ltss7.4.33-150200.3.65.1fixed
Susephp7linux enterprise high performance computing 15 sp3-ltss7.4.33-150200.3.65.1fixed
Susephp7linux enterprise server 15 sp2-ltss7.4.33-150200.3.65.1fixed
Susephp7linux enterprise server 15 sp3-ltss7.4.33-150200.3.65.1fixed
Susephp7linux enterprise server for sap applications 15 sp27.4.33-150200.3.65.1fixed
Susephp7linux enterprise server for sap applications 15 sp37.4.33-150200.3.65.1fixed
Susephp7enterprise storage 7.17.4.33-150200.3.65.1fixed
Susephp74linux enterprise module for web and scripting 127.4.33-1.65.1fixed
Susephp74linux enterprise software development kit 12 sp57.4.33-1.65.1fixed
Suseapache2-mod_php8linux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1fixed
Susephp8linux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1fixed
Susephp8-embedlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1fixed
Susephp8-fastcgilinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1fixed
Susephp8-fpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1fixed
Susephp8-testlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1fixed
Opensuseapache2-mod_php8leap 15.58.0.30-150400.4.40.1fixed
Opensusephp8leap 15.58.0.30-150400.4.40.1fixed
Opensusephp8-embedleap 15.58.0.30-150400.4.40.1fixed
Opensusephp8-fastcgileap 15.58.0.30-150400.4.40.1fixed
Opensusephp8-fpmleap 15.58.0.30-150400.4.40.1fixed
Opensusephp8-testleap 15.58.0.30-150400.4.40.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianphp8.2sourcebookworm8.2.18-1~deb12u1not yet assignedNot reportedNot reported
Ubuntuphp7.0debpro7.0.33-0ubuntu0.16.04.16+esm9Not reportedUBUNTU-CVE-2024-2756Not reported
Ubuntuphp7.2debpro7.2.24-0ubuntu0.18.04.17+esm3Not reportedUBUNTU-CVE-2024-2756Not reported
Ubuntuphp7.4deb20.047.4.3-4ubuntu2.22Not reportedUBUNTU-CVE-2024-2756Not reported
Ubuntuphp8.1deb22.048.1.2-1ubuntu2.17Not reportedUBUNTU-CVE-2024-2756Not reported
Ubuntuphp8.3deb24.048.3.6-0maysync1Not reportedUBUNTU-CVE-2024-2756Not reported
Suseapache2-mod_php7rpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Susephp7rpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Susephp7-fastcgirpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Susephp7-fpmrpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Susephp7-embedrpmlinux enterprise module for package hub 15 sp57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Opensuseapache2-mod_php7rpmleap 15.57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Opensusephp7rpmleap 15.57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Opensusephp7-embedrpmleap 15.57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Opensusephp7-fastcgirpmleap 15.57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Opensusephp7-fpmrpmleap 15.57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Opensusephp7-testrpmleap 15.57.4.33-150400.4.34.1Not reportedSUSE-SU-2024:1444-1Not reported
Susephp7rpmlinux enterprise high performance computing 15 sp2-ltss7.4.33-150200.3.65.1Not reportedSUSE-SU-2024:2037-1Not reported
Susephp7rpmlinux enterprise high performance computing 15 sp3-ltss7.4.33-150200.3.65.1Not reportedSUSE-SU-2024:2037-1Not reported
Susephp7rpmlinux enterprise server 15 sp2-ltss7.4.33-150200.3.65.1Not reportedSUSE-SU-2024:2037-1Not reported
Susephp7rpmlinux enterprise server 15 sp3-ltss7.4.33-150200.3.65.1Not reportedSUSE-SU-2024:2037-1Not reported
Susephp7rpmlinux enterprise server for sap applications 15 sp27.4.33-150200.3.65.1Not reportedSUSE-SU-2024:2037-1Not reported
Susephp7rpmlinux enterprise server for sap applications 15 sp37.4.33-150200.3.65.1Not reportedSUSE-SU-2024:2037-1Not reported
Susephp7rpmenterprise storage 7.17.4.33-150200.3.65.1Not reportedSUSE-SU-2024:2037-1Not reported
Susephp74rpmlinux enterprise module for web and scripting 127.4.33-1.65.1Not reportedSUSE-SU-2024:1445-1Not reported
Susephp74rpmlinux enterprise software development kit 12 sp57.4.33-1.65.1Not reportedSUSE-SU-2024:1445-1Not reported
Suseapache2-mod_php8rpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Susephp8rpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Susephp8-embedrpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Susephp8-fastcgirpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Susephp8-fpmrpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Susephp8-testrpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Opensuseapache2-mod_php8rpmleap 15.58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Opensusephp8rpmleap 15.58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Opensusephp8-embedrpmleap 15.58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Opensusephp8-fastcgirpmleap 15.58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Opensusephp8-fpmrpmleap 15.58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported
Opensusephp8-testrpmleap 15.58.0.30-150400.4.40.1Not reportedSUSE-SU-2024:1446-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References