{"id":"CLSA-2023-1677784124","summary":"Fix CVE(s): CVE-2023-0662, CVE-2023-0568, CVE-2023-0567","details":"\n   * SECURITY UPDATE: Invalid validation of BCrypt hashes\n     - debian/patches/CVE-2023-0567.patch: Remove \"PHP Hack\" to fix validation\n       of malformed BCrypt hashes\n     - CVE-2023-0567\n   * SECURITY UPDATE: Unauthorized data access or modification\n     - debian/patches/CVE-2023-0568.patch: Fix array overrun when appending\n       slash to paths\n     - CVE-2023-0568\n   * SECURITY UPDATE: DoS vulnerability when parsing multipart request body\n     - debian/patches/CVE-2023-0662.patch: Introduce max_multipart_body_parts\n       INI and fix repeated warning for file uploads limit exciding\n     - CVE-2023-0662","modified":"2026-06-04T10:03:54.498395038Z","published":"2023-03-02T19:08:44Z","upstream":["CVE-2023-0567","CVE-2023-0568","CVE-2023-0662"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1677784124"}],"affected":[{"package":{"name":"libapache2-mod-php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"libphp7.0-embed","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libphp7.0-embed?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-bcmath","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bcmath?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-bz2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bz2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-cgi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cgi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-cli","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cli?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-curl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-curl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-dba","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dba?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-enchant","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-enchant?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-fpm","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-fpm?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-gd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-gmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-imap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-imap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-interbase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-interbase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-intl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-intl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-json","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-json?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-ldap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-ldap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-mbstring","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mbstring?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-mcrypt","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mcrypt?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-mysql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mysql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-odbc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-odbc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-opcache","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-opcache?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-pgsql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pgsql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-phpdbg","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-phpdbg?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-pspell","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pspell?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-readline","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-readline?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-recode","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-recode?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-snmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-snmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-soap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-soap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-sqlite3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sqlite3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-sybase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sybase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-tidy","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-tidy?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-xml","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xml?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-xmlrpc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xmlrpc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-xsl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xsl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}},{"package":{"name":"php7.0-zip","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-zip?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677784124.json"}}],"schema_version":"1.7.5"}