{"id":"CLSA-2026-1792599451","summary":"Fix CVE(s): CVE-2026-109618, CVE-2026-109619","details":"   * SECURITY UPDATE: code execution via state corruption after an\n     out-of-memory error and via stale global state\n     - debian/patches/CVE-2026-109618.patch: terminate the process on memory\n       limit and allocation overflow errors instead of unwinding, clear\n       request globals at shutdown, disable session upload progress, keep\n       only the Content-Disposition and Content-Type multipart part headers\n       and start request variable arrays with one slot. Also fix\n       array_merge_recursive() duplicating integer keys (bug #76505): for\n       hash sub-arrays it now appends after the largest integer key, as\n       PHP 7.1.20 and later do.\n     - CVE-2026-109618\n     - CVE-2026-109619","modified":"2026-10-26T09:32:02.818396312Z","published":"2026-10-21T16:34:17Z","upstream":["CVE-2026-109618","CVE-2026-109619"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1792599451.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109618"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109619"}],"affected":[{"package":{"name":"libapache2-mod-php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"libphp7.0-embed","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libphp7.0-embed?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-bcmath","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bcmath?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-bz2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-bz2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-cgi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cgi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-cli","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-cli?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-curl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-curl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-dba","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dba?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-enchant","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-enchant?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-fpm","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-fpm?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-gd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-gmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-gmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-imap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-imap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-interbase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-interbase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-intl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-intl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-json","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-json?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-ldap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-ldap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-mbstring","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mbstring?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-mcrypt","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mcrypt?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-mysql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-mysql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-odbc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-odbc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-opcache","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-opcache?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-pgsql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pgsql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-phpdbg","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-phpdbg?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-pspell","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-pspell?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-readline","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-readline?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-recode","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-recode?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-snmp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-snmp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-soap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-soap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-sqlite3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sqlite3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-sybase","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-sybase?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-tidy","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-tidy?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-xml","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xml?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-xmlrpc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xmlrpc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-xsl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-xsl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}},{"package":{"name":"php7.0-zip","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/php7.0-zip?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17+tuxcare.els29"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792599451.json"}}],"schema_version":"1.9.0"}