{"id":"CLSA-2025-1766599216","summary":"Fix CVE(s): CVE-2025-14178","details":"   * SECURITY UPDATE: Heap buffer overflow in array_merge()\n     - debian/patches/CVE-2025-14178.patch: add validation to check\n       if total element count exceeds HT_MAX_SIZE before allocation.\n     - CVE-2025-14178","modified":"2026-06-04T09:45:11.625134201Z","published":"2025-12-24T18:00:20Z","upstream":["CVE-2025-14178"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1766599216.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"libphp7.4-embed","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libphp7.4-embed?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-bcmath","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bcmath?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-bz2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bz2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-cgi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cgi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-cli","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cli?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-curl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-curl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-dba","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dba?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-enchant","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-enchant?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-fpm","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-fpm?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-gd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-gmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-imap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-imap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-interbase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-interbase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-intl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-intl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-json","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-json?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-mbstring","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mbstring?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-odbc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-odbc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-opcache","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-opcache?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-phpdbg","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-phpdbg?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-pspell","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pspell?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-readline","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-readline?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-snmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-snmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-soap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-soap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-sqlite3","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sqlite3?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-sybase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sybase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-tidy","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-tidy?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-xml","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xml?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-xmlrpc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xmlrpc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-xsl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xsl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}},{"package":{"name":"php7.4-zip","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-zip?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1766599216.json"}}],"schema_version":"1.7.5"}