Linux · Security advisory · March 14, 2025

DSA-5878-1: php8.2 security update

DSA-5878-1, released March 14, 2025, fixes 1 CVE in php8.2 (version 8.2.28-1~deb12u1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0059
48th percentile

Fixed package versions

ProductReleaseFixed in
php8.2Debian 12.15 (bookworm)8.2.28-1~deb12u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-1217 php8.3-fpm: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when ht... 8.1 0.0059 None reported
Showing 1 to 1 of 1 1