{"id":"CLSA-2026-1791531340","summary":"Fix of 10 CVEs","details":"   * SECURITY UPDATE: credentials leaked to another origin on HTTP redirects\n     - debian/patches/CVE-2026-91766.patch: strip the Authorization, Cookie\n       and Proxy-Authorization user headers when a redirect changes the\n       scheme, host or port, and remove whole header lines in\n       ext/standard/http_fopen_wrapper.c\n     - CVE-2026-91766\n   * SECURITY UPDATE: heap over-read in TLS wildcard certificate name\n     matching\n     - debian/patches/CVE-2026-91767.patch: include the wildcard prefix\n       length in the subject length check so memchr() cannot read past the\n       peer name in ext/openssl/xp_ssl.c\n     - CVE-2026-91767\n   * SECURITY UPDATE: FastCGI allowed_clients matched IPv6 clients on a /96\n     prefix\n     - debian/patches/CVE-2026-91768.patch: compare the full 16-byte IPv6\n       address in fcgi_is_allowed() in main/fastcgi.c\n     - CVE-2026-91768\n   * SECURITY UPDATE: TLS peer name check fell back to the certificate CN\n     when the certificate has a service identity\n     - debian/patches/CVE-2026-91769.patch: do not fall back to the Common\n       Name when the certificate has a DNS, URI or SRV subjectAltName in\n       ext/openssl/xp_ssl.c\n     - CVE-2026-91769\n   * SECURITY UPDATE: heap over-read on an empty Location header in HTTP\n     redirects\n     - debian/patches/CVE-2026-93682.patch: use the stored Location length\n       instead of strlen() and of reading the second byte when resolving a\n       relative redirect in ext/standard/http_fopen_wrapper.c\n     - CVE-2026-93682","modified":"2026-10-26T09:32:06.372274203Z","published":"2026-10-09T07:36:03Z","upstream":["CVE-2026-91766","CVE-2026-91767","CVE-2026-91768","CVE-2026-91769","CVE-2026-93682"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1791531340.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1218"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14181"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6103"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91765"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91766"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91767"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91768"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91769"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92842"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93682"}],"affected":[{"package":{"name":"libapache2-mod-php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"libphp7.4-embed","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libphp7.4-embed?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-bcmath","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bcmath?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-bz2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bz2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-cgi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cgi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-cli","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cli?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-curl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-curl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-dba","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dba?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-enchant","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-enchant?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-fpm","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-fpm?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-gd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-gmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-imap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-imap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-interbase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-interbase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-intl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-intl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-json","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-json?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-mbstring","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mbstring?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-odbc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-odbc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-opcache","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-opcache?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-phpdbg","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-phpdbg?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-pspell","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pspell?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-readline","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-readline?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-snmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-snmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-soap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-soap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-sqlite3","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sqlite3?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-sybase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sybase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-tidy","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-tidy?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-xml","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xml?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-xmlrpc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xmlrpc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-xsl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xsl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}},{"package":{"name":"php7.4-zip","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-zip?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"}}],"schema_version":"1.9.0"}