{"id":"CLSA-2026-1778939818","summary":"Fix of 6 CVEs","details":"   * SECURITY UPDATE: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4)\n     - debian/patches/CVE-2026-7258.patch: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4)\n     - CVE-2026-7258\n   * SECURITY UPDATE: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5)\n     - debian/patches/CVE-2026-6722.patch: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5)\n     - CVE-2026-6722\n   * SECURITY UPDATE: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv)\n     - debian/patches/CVE-2026-7262.patch: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv)\n     - CVE-2026-7262\n   * SECURITY UPDATE: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57)\n     - debian/patches/CVE-2026-7568.patch: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57)\n     - CVE-2026-7568\n   * SECURITY UPDATE: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q)\n     - debian/patches/CVE-2026-7261.patch: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q)\n     - CVE-2026-7261\n   * SECURITY UPDATE: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm)\n     - debian/patches/CVE-2025-14179.patch: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm)\n     - CVE-2025-14179","modified":"2026-06-04T10:03:15.371728338Z","published":"2026-05-16T15:44:59Z","upstream":["CVE-2025-14179","CVE-2026-6722","CVE-2026-7258","CVE-2026-7261","CVE-2026-7262","CVE-2026-7568"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1778939818.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"libphp7.0-embed","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libphp7.0-embed?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-bcmath","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bcmath?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-bz2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bz2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-cgi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cgi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-cli","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cli?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-curl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-curl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-dba","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dba?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-enchant","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-enchant?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-fpm","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-fpm?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-gd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-gmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-imap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-imap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-interbase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-interbase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-intl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-intl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-json","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-json?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-ldap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-ldap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-mbstring","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mbstring?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-mcrypt","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mcrypt?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-mysql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mysql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-odbc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-odbc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-opcache","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-opcache?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-pgsql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pgsql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-phpdbg","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-phpdbg?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-pspell","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pspell?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-readline","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-readline?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-recode","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-recode?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-snmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-snmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-soap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-soap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-sqlite3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sqlite3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-sybase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sybase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-tidy","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-tidy?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-xml","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xml?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-xmlrpc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xmlrpc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-xsl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xsl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}},{"package":{"name":"php7.0-zip","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-zip?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1778939818.json"}}],"schema_version":"1.7.5"}