{"id":"CLSA-2021-1639681846","summary":"Fix CVE(s): CVE-2020-7071, CVE-2020-7068, CVE-2021-21705, CVE-2021-21704, CVE-2021-21703, CVE-2021-21702","details":"\n   * SECURITY UPDATE: Process crash and information disclosure\n     - debian/patches/CVE-2020-7068.patch: fix access-after-free for\n       actual_alias pointer\n     - CVE-2020-7068\n   * SECURITY UPDATE: logic error due to invalid input validation\n     - debian/patches/CVE-2020-7071.patch: add validation fo url-\u003euser field\n     - CVE-2020-7071\n   * SECURITY UPDATE: program crash due to null pointer dereference\n     - debian/patches/CVE-2021-21702.patch: pass empty string instead for NULL\n       pointers to soap_error1(). Check NULL pointer in attr_is_equal_ex() and\n       node_is_equal_ex()\n     - CVE-2021-21702\n   * SECURITY UPDATE: integer overflow and subsequent incorrect buffer allocation\n     - debian/patches/CVE-2021-21704.patch: add checks that prevent the overflow,\n       replace strcat() with more secure strlcat()\n     - CVE-2021-21704\n   * SECURITY UPDATE: logic error due to incorrect input validation\n     - debian/patches/CVE-2021-21705.patch: fix validation of url password with\n       FILTER_VALIDATE_URL parameter,\n     - CVE-2021-21705\n   * SECURITY UPDATE: priv escalation due to shared memory between worker processes\n     - debian/patches/CVE-2021-21703.patch: change scoreboard-\u003eproc type to array of\n       structs and use scoreboard-\u003enprocs only in child processes\n     - CVE-2021-21703","modified":"2026-06-04T10:03:57.983596111Z","published":"2021-12-16T19:10:46Z","upstream":["CVE-2020-7068","CVE-2020-7071","CVE-2021-21702","CVE-2021-21703","CVE-2021-21704","CVE-2021-21705"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1639681846"}],"affected":[{"package":{"name":"libapache2-mod-php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"libphp7.0-embed","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libphp7.0-embed?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-bcmath","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bcmath?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-bz2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bz2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-cgi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cgi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-cli","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cli?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-curl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-curl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-dba","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dba?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-enchant","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-enchant?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-fpm","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-fpm?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-gd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-gmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-imap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-imap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-interbase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-interbase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-intl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-intl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-json","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-json?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-ldap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-ldap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-mbstring","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mbstring?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-mcrypt","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mcrypt?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-mysql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mysql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-odbc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-odbc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-opcache","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-opcache?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-pgsql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pgsql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-phpdbg","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-phpdbg?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-pspell","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pspell?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-readline","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-readline?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-recode","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-recode?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-snmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-snmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-soap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-soap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-sqlite3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sqlite3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-sybase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sybase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-tidy","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-tidy?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-xml","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xml?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-xmlrpc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xmlrpc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-xsl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xsl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}},{"package":{"name":"php7.0-zip","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-zip?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1639681846.json"}}],"schema_version":"1.7.5"}