{"id":"CLSA-2026-1778943258","summary":"Fix CVE(s): CVE-2026-6722, CVE-2026-7261, CVE-2026-7262, CVE-2026-7568","details":"   * SECURITY UPDATE: SOAP use-after-free with SOAP_PERSISTENCE_SESSION\n     - debian/patches/CVE-2026-7261.patch: skip zval_ptr_dtor on the persisted\n       soap_obj after header parsing failure when persistence is\n       SOAP_PERSISTENCE_SESSION\n     - CVE-2026-7261\n   * SECURITY UPDATE: SOAP use-after-free via Apache Map with duplicate keys\n     - debian/patches/CVE-2026-6722.patch: do not store stale pointers in\n       SOAP_GLOBAL(ref_map) when the encoded zval is freed during Apache Map\n       decoding with duplicate keys\n     - CVE-2026-6722\n   * SECURITY UPDATE: signed integer overflow of char array offset in metaphone()\n     - debian/patches/CVE-2026-7568.patch: switch metaphone position tracker to\n       size_t and bound character-offset arithmetic to prevent signed overflow\n       on inputs larger than INT_MAX bytes\n     - CVE-2026-7568\n   * SECURITY UPDATE: SOAP NULL pointer dereference in Apache Map decoding\n     - debian/patches/CVE-2026-7262.patch: check the value element before\n       dereferencing it when decoding Apache Map entries\n     - CVE-2026-7262","modified":"2026-06-04T09:45:29.904660597Z","published":"2026-05-16T14:54:23Z","upstream":["CVE-2026-6722","CVE-2026-7261","CVE-2026-7262","CVE-2026-7568"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1778943258.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"libphp7.3-embed","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libphp7.3-embed?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-bcmath","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bcmath?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-bz2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bz2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-cgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-cli","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cli?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-curl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-curl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-dba","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dba?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-enchant","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-enchant?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-fpm","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-fpm?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-gd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-gmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-imap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-imap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-interbase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-interbase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-intl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-intl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-json","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-json?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-ldap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-ldap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-mbstring","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mbstring?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-mysql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mysql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-odbc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-odbc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-opcache","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-opcache?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-pgsql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pgsql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-phpdbg","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-phpdbg?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-pspell","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pspell?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-readline","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-readline?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-recode","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-recode?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-snmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-snmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-soap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-soap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-sqlite3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sqlite3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-sybase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sybase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-tidy","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-tidy?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-xml","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xml?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-xmlrpc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xmlrpc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-xsl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xsl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}},{"package":{"name":"php7.3-zip","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-zip?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778943258.json"}}],"schema_version":"1.7.5"}