From 1436209d3f011973e709fd2aa5f480e7dacae936 Mon Sep 17 00:00:00 2001 From: Muhammad Moinur Rahman Date: Thu, 3 Jul 2025 20:37:41 +0200 Subject: [PATCH] security/vuxml: Add CVE for php8* --- security/vuxml/vuln/2025.xml | 49 ++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 4d94ec3c9fbb..6bc7dd3de85f 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,52 @@ + + php -- Multiple vulnerabilities + + + php81 + 8.1.33 + + + php82 + 8.2.29 + + + php83 + 8.3.23 + + + php84 + 8.4.10 + + + + +

php.net reports:

+
+
    +
  • + CVE-2025-1735: pgsql extension does not check for errors during escaping +
    • +
  • + CVE-2025-6491: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix +
    • +
  • + CVE-2025-1220: Null byte termination in hostnames +
    • +
+
+ + + + CVE-2025-1735 + CVE-2025-6491 + CVE-2025-1220 + + + 2025-02-27 + 2025-07-03 + + + Mozilla -- exploitable crash