{"id":"CLSA-2026-1791737248","summary":"Fix of 10 CVEs","details":"   * SECURITY UPDATE: packet over-reads in the mysqlnd wire protocol parser\n     - debian/patches/CVE-2025-1218.patch: bound every packet reader and the\n       text and binary row decoders in ext/mysqlnd/mysqlnd_wireprotocol.c and\n       ext/mysqlnd/mysqlnd_ps_codec.c, including the CVE-2024-8929 checks they\n       build on. Not carried: upstream's caching_sha2 and MariaDB hunks (code\n       absent in 7.0) and its regression tests (PHP 8 test harness).\n     - CVE-2025-1218","modified":"2026-10-26T09:43:12.234157786Z","published":"2026-10-11T16:47:44Z","upstream":["CVE-2024-8929","CVE-2025-1218"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1791737248.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1218"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14181"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6103"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91765"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91766"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91767"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91768"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91769"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92842"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93682"}],"affected":[{"package":{"name":"libapache2-mod-php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"libphp7.0-embed","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libphp7.0-embed?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-bcmath","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bcmath?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-bz2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bz2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-cgi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cgi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-cli","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cli?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-curl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-curl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-dba","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dba?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-enchant","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-enchant?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-fpm","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-fpm?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-gd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-gmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-imap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-imap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-interbase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-interbase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-intl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-intl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-json","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-json?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-ldap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-ldap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-mbstring","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mbstring?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-mcrypt","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mcrypt?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-mysql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mysql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-odbc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-odbc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-opcache","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-opcache?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-pgsql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pgsql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-phpdbg","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-phpdbg?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-pspell","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pspell?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-readline","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-readline?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-recode","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-recode?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-snmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-snmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-soap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-soap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-sqlite3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sqlite3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-sybase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sybase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-tidy","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-tidy?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-xml","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xml?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-xmlrpc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xmlrpc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-xsl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xsl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}},{"package":{"name":"php7.0-zip","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-zip?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els28"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791737248.json"}}],"schema_version":"1.9.0"}