{"id":"CLSA-2026-1792616775","summary":"Fix CVE(s): CVE-2026-109618, CVE-2026-109619","details":"   * SECURITY UPDATE: remote code execution via engine state corruption after bailout\n     - debian/patches/CVE-2026-109618-CVE-2026-109619.patch: avoid state\n       corruption via bailout (GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp)\n     - CVE-2026-109618\n     - CVE-2026-109619","modified":"2026-10-26T09:31:53.328587771Z","published":"2026-10-21T21:06:27Z","upstream":["CVE-2026-109618","CVE-2026-109619"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792616775.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109618"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109619"}],"affected":[{"package":{"name":"libapache2-mod-php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"libphp7.3-embed","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libphp7.3-embed?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-bcmath","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bcmath?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-bz2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-bz2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-cgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-cli","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-cli?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-curl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-curl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-dba","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dba?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-enchant","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-enchant?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-fpm","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-fpm?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-gd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-gmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-gmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-imap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-imap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-interbase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-interbase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-intl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-intl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-json","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-json?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-ldap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-ldap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-mbstring","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mbstring?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-mysql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-mysql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-odbc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-odbc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-opcache","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-opcache?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-pgsql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pgsql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-phpdbg","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-phpdbg?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-pspell","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-pspell?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-readline","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-readline?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-recode","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-recode?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-snmp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-snmp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-soap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-soap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-sqlite3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sqlite3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-sybase","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-sybase?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-tidy","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-tidy?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-xml","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xml?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-xmlrpc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xmlrpc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-xsl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-xsl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}},{"package":{"name":"php7.3-zip","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/php7.3-zip?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.31-1~deb10u7+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792616775.json"}}],"schema_version":"1.9.0"}