
CVE catalog
CVE-2025-1736
PHP vulnerabilities
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.
- Severity
- High · CVSS 7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.55% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "php8.2",
"status": "fixed",
"release": "bookworm",
"version": "8.2.32-1~deb12u1"
},
{
"name": "php8.2",
"status": "fixed",
"release": "bookworm-security",
"version": "8.2.35-1~deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "php8.2",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "8.2.28-1~deb12u1"
}
],
"distribution_packages": [
{
"name": "php8.3",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "libapache2-mod-php8.3",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "libphp8.3-embed",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-bcmath",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-bz2",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-cgi",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-cli",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-common",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-curl",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-dba",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-dev",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-enchant",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-fpm",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-gd",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-gmp",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-imap",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-interbase",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-intl",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-ldap",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-mbstring",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-mysql",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-odbc",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-opcache",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-pgsql",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-phpdbg",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-pspell",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-readline",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-snmp",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-soap",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-sqlite3",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-sybase",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-tidy",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-xml",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-xsl",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php8.3-zip",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4"
},
{
"name": "php5",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"5.5.3+dfsg-1ubuntu2",
"5.5.3+dfsg-1ubuntu3",
"5.5.6+dfsg-1ubuntu1",
"5.5.6+dfsg-1ubuntu2",
"5.5.8+dfsg-2ubuntu1",
"5.5.9+dfsg-1ubuntu1",
"5.5.9+dfsg-1ubuntu2",
"5.5.9+dfsg-1ubuntu3",
"5.5.9+dfsg-1ubuntu4",
"5.5.9+dfsg-1ubuntu4.1",
"5.5.9+dfsg-1ubuntu4.2",
"5.5.9+dfsg-1ubuntu4.3",
"5.5.9+dfsg-1ubuntu4.4",
"5.5.9+dfsg-1ubuntu4.5",
"5.5.9+dfsg-1ubuntu4.6",
"5.5.9+dfsg-1ubuntu4.7",
"5.5.9+dfsg-1ubuntu4.9",
"5.5.9+dfsg-1ubuntu4.11",
"5.5.9+dfsg-1ubuntu4.12",
"5.5.9+dfsg-1ubuntu4.13",
"5.5.9+dfsg-1ubuntu4.14",
"5.5.9+dfsg-1ubuntu4.16",
"5.5.9+dfsg-1ubuntu4.17",
"5.5.9+dfsg-1ubuntu4.19",
"5.5.9+dfsg-1ubuntu4.20",
"5.5.9+dfsg-1ubuntu4.21",
"5.5.9+dfsg-1ubuntu4.22",
"5.5.9+dfsg-1ubuntu4.23",
"5.5.9+dfsg-1ubuntu4.24",
"5.5.9+dfsg-1ubuntu4.25",
"5.5.9+dfsg-1ubuntu4.26",
"5.5.9+dfsg-1ubuntu4.27",
"5.5.9+dfsg-1ubuntu4.29",
"5.5.9+dfsg-1ubuntu4.29+esm1",
"5.5.9+dfsg-1ubuntu4.29+esm2",
"5.5.9+dfsg-1ubuntu4.29+esm3",
"5.5.9+dfsg-1ubuntu4.29+esm4",
"5.5.9+dfsg-1ubuntu4.29+esm5",
"5.5.9+dfsg-1ubuntu4.29+esm6",
"5.5.9+dfsg-1ubuntu4.29+esm8",
"5.5.9+dfsg-1ubuntu4.29+esm10",
"5.5.9+dfsg-1ubuntu4.29+esm11",
"5.5.9+dfsg-1ubuntu4.29+esm12",
"5.5.9+dfsg-1ubuntu4.29+esm13",
"5.5.9+dfsg-1ubuntu4.29+esm14",
"5.5.9+dfsg-1ubuntu4.29+esm15",
"5.5.9+dfsg-1ubuntu4.29+esm16",
"5.5.9+dfsg-1ubuntu4.29+esm17",
"5.5.9+dfsg-1ubuntu4.29+esm18"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2025-1736"
},
{
"name": "php7.0",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.33-0ubuntu0.16.04.16+esm15"
}
]
}
],
"release": "pro",
"versions": [
"7.0.1-5",
"7.0.1-6",
"7.0.2-1",
"7.0.2-3",
"7.0.2-4",
"7.0.2-5",
"7.0.3-2",
"7.0.3-3",
"7.0.3-9ubuntu1",
"7.0.4-5ubuntu1",
"7.0.4-5ubuntu2",
"7.0.4-7ubuntu1",
"7.0.4-7ubuntu2",
"7.0.4-7ubuntu2.1",
"7.0.8-0ubuntu0.16.04.1",
"7.0.8-0ubuntu0.16.04.2",
"7.0.8-0ubuntu0.16.04.3",
"7.0.13-0ubuntu0.16.04.1",
"7.0.15-0ubuntu0.16.04.1",
"7.0.15-0ubuntu0.16.04.2",
"7.0.15-0ubuntu0.16.04.4",
"7.0.18-0ubuntu0.16.04.1",
"7.0.22-0ubuntu0.16.04.1",
"7.0.25-0ubuntu0.16.04.1",
"7.0.28-0ubuntu0.16.04.1",
"7.0.30-0ubuntu0.16.04.1",
"7.0.32-0ubuntu0.16.04.1",
"7.0.33-0ubuntu0.16.04.1",
"7.0.33-0ubuntu0.16.04.2",
"7.0.33-0ubuntu0.16.04.3",
"7.0.33-0ubuntu0.16.04.4",
"7.0.33-0ubuntu0.16.04.5",
"7.0.33-0ubuntu0.16.04.6",
"7.0.33-0ubuntu0.16.04.7",
"7.0.33-0ubuntu0.16.04.9",
"7.0.33-0ubuntu0.16.04.11",
"7.0.33-0ubuntu0.16.04.12",
"7.0.33-0ubuntu0.16.04.14",
"7.0.33-0ubuntu0.16.04.15",
"7.0.33-0ubuntu0.16.04.16",
"7.0.33-0ubuntu0.16.04.16+esm1",
"7.0.33-0ubuntu0.16.04.16+esm2",
"7.0.33-0ubuntu0.16.04.16+esm3",
"7.0.33-0ubuntu0.16.04.16+esm4",
"7.0.33-0ubuntu0.16.04.16+esm5",
"7.0.33-0ubuntu0.16.04.16+esm6",
"7.0.33-0ubuntu0.16.04.16+esm7",
"7.0.33-0ubuntu0.16.04.16+esm8",
"7.0.33-0ubuntu0.16.04.16+esm9",
"7.0.33-0ubuntu0.16.04.16+esm10",
"7.0.33-0ubuntu0.16.04.16+esm11",
"7.0.33-0ubuntu0.16.04.16+esm12",
"7.0.33-0ubuntu0.16.04.16+esm13",
"7.0.33-0ubuntu0.16.04.16+esm14"
],
"ecosystem": "deb",
"fixed_version": "7.0.33-0ubuntu0.16.04.16+esm15",
"provider_record_id": "UBUNTU-CVE-2025-1736"
},
{
"name": "php7.2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "7.2.24-0ubuntu0.18.04.17+esm8"
}
]
}
],
"release": "pro",
"versions": [
"7.2.1-1ubuntu2",
"7.2.2-1ubuntu1",
"7.2.2-1ubuntu2",
"7.2.3-1ubuntu1",
"7.2.5-0ubuntu0.18.04.1",
"7.2.7-0ubuntu0.18.04.1",
"7.2.7-0ubuntu0.18.04.2",
"7.2.10-0ubuntu0.18.04.1",
"7.2.15-0ubuntu0.18.04.1",
"7.2.15-0ubuntu0.18.04.2",
"7.2.17-0ubuntu0.18.04.1",
"7.2.19-0ubuntu0.18.04.1",
"7.2.19-0ubuntu0.18.04.2",
"7.2.24-0ubuntu0.18.04.1",
"7.2.24-0ubuntu0.18.04.2",
"7.2.24-0ubuntu0.18.04.3",
"7.2.24-0ubuntu0.18.04.4",
"7.2.24-0ubuntu0.18.04.6",
"7.2.24-0ubuntu0.18.04.7",
"7.2.24-0ubuntu0.18.04.8",
"7.2.24-0ubuntu0.18.04.9",
"7.2.24-0ubuntu0.18.04.10",
"7.2.24-0ubuntu0.18.04.11",
"7.2.24-0ubuntu0.18.04.12",
"7.2.24-0ubuntu0.18.04.13",
"7.2.24-0ubuntu0.18.04.15",
"7.2.24-0ubuntu0.18.04.16",
"7.2.24-0ubuntu0.18.04.17",
"7.2.24-0ubuntu0.18.04.17+esm1",
"7.2.24-0ubuntu0.18.04.17+esm2",
"7.2.24-0ubuntu0.18.04.17+esm3",
"7.2.24-0ubuntu0.18.04.17+esm4",
"7.2.24-0ubuntu0.18.04.17+esm5",
"7.2.24-0ubuntu0.18.04.17+esm6",
"7.2.24-0ubuntu0.18.04.17+esm7"
],
"ecosystem": "deb",
"fixed_version": "7.2.24-0ubuntu0.18.04.17+esm8",
"provider_record_id": "UBUNTU-CVE-2025-1736"
},
{
"name": "php7.4",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"7.4.3-4build1",
"7.4.3-4build2",
"7.4.3-4ubuntu1",
"7.4.3-4ubuntu1.1",
"7.4.3-4ubuntu2.2",
"7.4.3-4ubuntu2.4",
"7.4.3-4ubuntu2.5",
"7.4.3-4ubuntu2.6",
"7.4.3-4ubuntu2.7",
"7.4.3-4ubuntu2.8",
"7.4.3-4ubuntu2.9",
"7.4.3-4ubuntu2.10",
"7.4.3-4ubuntu2.11",
"7.4.3-4ubuntu2.12",
"7.4.3-4ubuntu2.13",
"7.4.3-4ubuntu2.15",
"7.4.3-4ubuntu2.16",
"7.4.3-4ubuntu2.17",
"7.4.3-4ubuntu2.18",
"7.4.3-4ubuntu2.19",
"7.4.3-4ubuntu2.20",
"7.4.3-4ubuntu2.22",
"7.4.3-4ubuntu2.23",
"7.4.3-4ubuntu2.24",
"7.4.3-4ubuntu2.26",
"7.4.3-4ubuntu2.28",
"7.4.3-4ubuntu2.29",
"7.4.3-4ubuntu2.29+esm1",
"7.4.3-4ubuntu2.29+esm2",
"7.4.3-4ubuntu2.29+esm3",
"7.4.3-4ubuntu2.29+esm4",
"7.4.3-4ubuntu2.29+esm5"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2025-1736"
},
{
"name": "php8.1",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.1.2-1ubuntu2.21"
}
]
}
],
"release": "22.04",
"versions": [
"8.1.0~rc4-1ubuntu2",
"8.1.0-1",
"8.1.2-1ubuntu1",
"8.1.2-1ubuntu2",
"8.1.2-1ubuntu2.1",
"8.1.2-1ubuntu2.2",
"8.1.2-1ubuntu2.3",
"8.1.2-1ubuntu2.4",
"8.1.2-1ubuntu2.5",
"8.1.2-1ubuntu2.6",
"8.1.2-1ubuntu2.8",
"8.1.2-1ubuntu2.9",
"8.1.2-1ubuntu2.10",
"8.1.2-1ubuntu2.11",
"8.1.2-1ubuntu2.13",
"8.1.2-1ubuntu2.14",
"8.1.2-1ubuntu2.15",
"8.1.2-1ubuntu2.17",
"8.1.2-1ubuntu2.18",
"8.1.2-1ubuntu2.19",
"8.1.2-1ubuntu2.20"
],
"ecosystem": "deb",
"fixed_version": "8.1.2-1ubuntu2.21",
"provider_record_id": "UBUNTU-CVE-2025-1736"
},
{
"name": "php8.3",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.3.6-0ubuntu0.24.04.4"
}
]
}
],
"release": "24.04",
"versions": [
"8.3.0-1",
"8.3.0-1ubuntu1",
"8.3.4-1",
"8.3.4-1build1",
"8.3.6-0maysync1",
"8.3.6-0ubuntu0.24.04.1",
"8.3.6-0ubuntu0.24.04.2",
"8.3.6-0ubuntu0.24.04.3"
],
"ecosystem": "deb",
"fixed_version": "8.3.6-0ubuntu0.24.04.4",
"provider_record_id": "UBUNTU-CVE-2025-1736"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libapache2-mod-php8.2]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [libphp8.2-embed]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2]Unknown
Details (4)
8.2.32-1~deb12u1· all · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· all · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· all · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· all · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-bcmath]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-bz2]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-cgi]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-cli]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-common]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-curl]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-dba]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-dev]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-enchant]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-fpm]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-gd]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-gmp]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-imap]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-interbase]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-intl]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-ldap]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- [php8.2-mbstring]Unknown
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.32-1~deb12u1· arm64 · bookwormFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
8.2.33-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
8.2.28-1~deb12u1usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_2470.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-1736]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-1736]
- [https://security-tracker.debian.org/tracker/CVE-2025-1736]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1736.json]
- [https://ubuntu.com/security/notices/USN-7400-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0566.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]