{"id":"CVE-2019-11036","aliases":["ALPINE-CVE-2019-11036","ALSA-2020:1624","BELL-CVE-2019-11036","CLSA-2026-1776879963","CLSA-2026-1776958404","DLA-1803-1","DSA-4527-1","DSA-4529-1","EUVD-2019-2744","GHSA-xr89-hqhp-26m9","RHSA-2019:2519","RHSA-2019:3299","RHSA-2020:1624","RLSA-2020:1624","SUSE-SU-2019:1325-1","SUSE-SU-2019:1360-1","SUSE-SU-2019:1365-1","SUSE-SU-2019:1461-1","SUSE-SU-2022:4067-1","UBUNTU-CVE-2019-11036","USN-3566-2","USN-4009-1","openSUSE-SU-2019:1572-1","openSUSE-SU-2019:1573-1","openSUSE-SU-2024:11167-1","openSUSE-SU-2024:11169-1"],"status":"published","title":"Heap over-read in PHP EXIF extension","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","severity":{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.07031,"percentile":0.94226,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-126"],"published":"2019-05-03T00:00:00Z","modified":"2026-11-03T06:32:29Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"php7","fixed_in":["7.1.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"php7","fixed_in":["7.2.18-r0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.29+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","fixed_in":["7.0.33-0ubuntu0.16.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","fixed_in":["7.2.19-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.18-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-2.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-2.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.5-9.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-2.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-2.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-2.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-2.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-2.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-2.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.5.0+53+9945c2af"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.3.0+2010+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8.4.0+2228+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els19"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.40+dfsg-0+deb8u3"}]}],"versions":["5.6.11+dfsg-1","5.6.12+dfsg-0+deb8u1","5.6.12+dfsg-1","5.6.13+dfsg-0+deb8u1","5.6.13+dfsg-1","5.6.13+dfsg-2","5.6.14+dfsg-0+deb8u1","5.6.14+dfsg-1","5.6.15+dfsg-1","5.6.16+dfsg-1","5.6.16+dfsg-2","5.6.16+dfsg-3","5.6.16+dfsg-4","5.6.17+dfsg-0+deb8u1","5.6.17+dfsg-1","5.6.17+dfsg-3","5.6.18+dfsg-1","5.6.19+dfsg-0+deb8u1","5.6.19+dfsg-1","5.6.19+dfsg-2","5.6.20+dfsg-0+deb8u1","5.6.20+dfsg-1","5.6.21+dfsg-1","5.6.21+dfsg-2","5.6.22+dfsg-0+deb8u1","5.6.22+dfsg-1","5.6.22+dfsg-2","5.6.23+dfsg-0+deb8u1","5.6.23+dfsg-1","5.6.24+dfsg-0+deb8u1","5.6.24+dfsg-1","5.6.26+dfsg-0+deb8u1","5.6.26+dfsg-1","5.6.27+dfsg-0+deb8u1","5.6.28+dfsg-0+deb8u1","5.6.29+dfsg-0+deb8u1","5.6.30+dfsg-0+deb8u1","5.6.33+dfsg-0+deb8u1","5.6.36+dfsg-0+deb8u1","5.6.37+dfsg-0+deb8u1","5.6.38+dfsg-0+deb8u1","5.6.39+dfsg-0+deb8u1","5.6.39+dfsg-0+deb8u2","5.6.40+dfsg-0+deb8u1","5.6.40+dfsg-0+deb8u2","5.6.7+dfsg-1","5.6.9+dfsg-0+deb8u1","5.6.9+dfsg-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"php7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.9-1~deb10u1"}]}],"versions":["7.3.4-2","7.3.6-1","7.3.8-1"],"bundled":6},{"source":"osv","ecosystem":"Debian:9","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0+deb9u5"}]}],"versions":["7.0.19-1","7.0.20-1","7.0.20-2","7.0.22-1","7.0.22-2","7.0.22-3","7.0.25-1","7.0.26-1","7.0.27-0+deb9u1","7.0.27-1","7.0.28-1","7.0.29-1","7.0.30-0+deb9u1","7.0.30-1","7.0.30-2","7.0.31-1","7.0.32-1","7.0.33-0+deb9u1","7.0.33-0+deb9u2","7.0.33-0+deb9u3"],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.12-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.5-9.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.12-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.12-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.12-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.12-2.module+el8.1.0+3202+af5476b9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.3-1.module+el8.1.0+3186+20164e6f"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.3-1.module+el8.1.0+3186+20164e6f"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.3-1.module+el8.1.0+3186+20164e6f"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.2.0+4601+7c76a223"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-2.module+el8.4.0+413+c9202dda"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.module+el8.4.0+413+c9202dda"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.5-9.module+el8.4.0+413+c9202dda"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.12-2.module+el8.4.0+413+c9202dda"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.3-1.module+el8.4.0+413+c9202dda"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.58.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.58.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.58.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.75.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.75.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.75.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.32.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.32.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm2"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.5"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.19-0ubuntu0.18.04.1"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm2"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.5"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.19-0ubuntu0.18.04.1"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-lp151.6.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-lp150.2.19.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.24-1.1"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-1.1"}]}],"bundled":97}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"},{"vendor":"php","product":"php"},{"vendor":"php group","product":"php"},{"vendor":"redhat","product":"software_collections"}],"references":[{"url":"https://bugs.php.net/bug.php?id=77950","tags":["x_refsource_MISC","x_transferred","Mailing List","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/108177","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BY2XUUAN277LS7HKAOGL4DVGAELOJV3/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NFXYNCXZCPYT7ZN4ZLI5EPQQW44FRRO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WN2HLPGEZEF4MFM5YC5FILZB5QEQFP3A/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20190517-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3566-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00035.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4009-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2519","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://seclists.org/bugtraq/2019/Sep/35","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4527","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4529","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://seclists.org/bugtraq/2019/Sep/38","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3299","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11036","tags":["advisory"]},{"url":"https://usn.ubuntu.com/4009-1"},{"url":"https://usn.ubuntu.com/3566-2"},{"url":"https://security.netapp.com/advisory/ntap-20190517-0003"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WN2HLPGEZEF4MFM5YC5FILZB5QEQFP3A"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3BY2XUUAN277LS7HKAOGL4DVGAELOJV3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NFXYNCXZCPYT7ZN4ZLI5EPQQW44FRRO"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WN2HLPGEZEF4MFM5YC5FILZB5QEQFP3A"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BY2XUUAN277LS7HKAOGL4DVGAELOJV3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NFXYNCXZCPYT7ZN4ZLI5EPQQW44FRRO"},{"url":"https://github.com/advisories/GHSA-xr89-hqhp-26m9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-11036","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-1624.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2018-20783","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11034","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11035","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11036","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11039","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11040","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11041","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11042","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9020","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9021","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9022","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9023","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9024","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9637","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9638","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9639","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9640","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-11036","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1776879963.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1776958404.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1484837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2519.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9118","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9120","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12932","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12932","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-16642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10545","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14851","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17082","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20783","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6977","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9020","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9021","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9021","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9022","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9023","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9024","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11034","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11036","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11036","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11040","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766378","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3299.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11043","tags":["advisory"]},{"url":"https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1624","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1624.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:1624","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1128883","tags":["report"]},{"url":"https://bugzilla.suse.com/1128886","tags":["report"]},{"url":"https://bugzilla.suse.com/1128887","tags":["report"]},{"url":"https://bugzilla.suse.com/1128889","tags":["report"]},{"url":"https://bugzilla.suse.com/1128892","tags":["report"]},{"url":"https://bugzilla.suse.com/1132837","tags":["report"]},{"url":"https://bugzilla.suse.com/1132838","tags":["report"]},{"url":"https://bugzilla.suse.com/1134322","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9675","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1133714","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191365-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191461-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118832","tags":["report"]},{"url":"https://bugzilla.suse.com/1119396","tags":["report"]},{"url":"https://bugzilla.suse.com/1126711","tags":["report"]},{"url":"https://bugzilla.suse.com/1126713","tags":["report"]},{"url":"https://bugzilla.suse.com/1126821","tags":["report"]},{"url":"https://bugzilla.suse.com/1126823","tags":["report"]},{"url":"https://bugzilla.suse.com/1126827","tags":["report"]},{"url":"https://bugzilla.suse.com/1127122","tags":["report"]},{"url":"https://bugzilla.suse.com/1128722","tags":["report"]},{"url":"https://bugzilla.suse.com/1129032","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9641","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224067-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204577","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37454","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-11036","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3566-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4009-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11040","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XB2BVRYZNLMC4LSAMSBDSCL5S7EXDJNZ/#XB2BVRYZNLMC4LSAMSBDSCL5S7EXDJNZ","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BZGSTORTRYTIVYMVFOFYRIJIMKYXZ32T/#BZGSTORTRYTIVYMVFOFYRIJIMKYXZ32T","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3415","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-11036","title":"Heap over-read in PHP EXIF extension","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","status":"published","published":"2019-05-03T19:28:15.566Z","modified":"2024-09-16T22:30:46.095Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T14:32:22.432545Z"}],"euvd":[{"id":"EUVD-2019-2744","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","status":"published","published":"2019-05-03T19:28:15Z","modified":"2024-09-16T22:30:46Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:55:02.424132Z"}],"ghsa":[{"id":"GHSA-xr89-hqhp-26m9","title":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2...","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","status":"published","published":"2022-05-24T16:45:06Z","modified":"2024-04-04T00:27:07Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125","CWE-126"],"updated_at":"2026-11-02T14:55:50.017793Z"}],"nvd":[{"id":"CVE-2019-11036","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","status":"published","published":"2019-05-03T20:29:00.357Z","modified":"2026-06-17T02:12:10.387Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-126","CWE-125"],"updated_at":"2026-11-02T14:05:12.471695Z"}],"osv":[{"id":"ALPINE-CVE-2019-11036","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","status":"published","published":"2019-05-03T20:29:00.357Z","modified":"2026-11-03T06:32:29.07465106Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-03T07:17:41.158523Z"},{"id":"BELL-CVE-2019-11036","title":"CVE-2019-11036 does not affect BellSoft software","status":"withdrawn","published":"2019-05-03T20:29:00Z","modified":"2026-01-26T09:45:52.060506Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2019-11036","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","status":"published","published":"2019-05-03T20:29:00.357Z","modified":"2026-10-24T10:30:57.308193259Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:10.383287Z"},{"id":"RHSA-2019:2519","title":"Red Hat Security Advisory: rh-php71-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:00:42Z","modified":"2026-06-29T10:26:05Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3299","title":"Red Hat Security Advisory: rh-php72-php security update","status":"published","published":"2024-09-13T22:02:04Z","modified":"2026-06-29T10:27:17Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2020:1624","title":"Red Hat Security Advisory: php:7.2 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:03:07Z","modified":"2026-06-29T10:29:50Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RLSA-2020:1624","title":"Moderate: php:7.2 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)\n\nSecurity Fix(es):\n\n* php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)\n\n* php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)\n\n* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)\n\n* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)\n\n* php: Invalid read in exif_process_SOFn() (CVE-2019-9640)\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: Buffer over-read in PHAR reading functions (CVE-2018-20783)\n\n* php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)\n\n* php: memcpy with negative length via crafted DNS response (CVE-2019-9022)\n\n* php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)\n\n* php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)\n\n* php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)\n\n* php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)\n\n* php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","status":"published","published":"2020-04-28T08:57:54Z","modified":"2026-02-05T06:45:12.830118Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-11036","description":"When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.","status":"published","published":"2019-05-03T00:00:00Z","modified":"2026-04-22T12:06:34.678699Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"},{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"},{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"ALSA-2020:1624","title":"Moderate: php:7.2 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)\n\nSecurity Fix(es):\n\n* php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)\n\n* php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)\n\n* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)\n\n* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)\n\n* php: Invalid read in exif_process_SOFn() (CVE-2019-9640)\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: Buffer over-read in PHAR reading functions (CVE-2018-20783)\n\n* php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)\n\n* php: memcpy with negative length via crafted DNS response (CVE-2019-9022)\n\n* php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)\n\n* php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)\n\n* php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)\n\n* php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)\n\n* php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-04-28T08:57:54Z","modified":"2026-10-29T11:00:07.037569654Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1776879963","title":"php: Fix of 9 CVEs","description":"- CVE-2019-9020: fix heap out-of-bounds read in xmlrpc_decode()\n- CVE-2019-9021: fix heap buffer overflow in phar_detect_phar_fname_ext\n- CVE-2019-9023: fix heap buffer over-reads in mbstring regex functions\n- CVE-2019-9641: fix uninitialized read in exif_process_IFD_in_TIFF\n- CVE-2019-11034: fix heap-buffer-overflow in exif_process_IFD_in_MAKERNOTE\n- CVE-2019-11035: fix heap-buffer-overflow in exif_iif_add_value\n- CVE-2019-11036: fix heap-buffer-overflow in exif_process_IFD_TAG\n- CVE-2019-11040: fix heap-buffer-overflow on php_jpg_get16\n- CVE-2019-13224: do not allow different encodings for onig_new_deluxe()","status":"published","published":"2026-04-22T17:46:08Z","modified":"2026-10-21T10:48:17.92929597Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1776958404","title":"php: Fix of 5 CVEs","description":"- CVE-2019-9023: mbstring oniguruma: fix heap overflow in utf32be_mbc_to_code and related mbc_to_code encoders (bug #77418); completes CVE-2019-9023 coverage alongside existing php-5.3.29-bug77370_77371_77381_77382_77385_77394.patch\n- CVE-2019-11034: exif: fix heap-buffer-overflow in php_ifd_get32s (bug #77753)\n- CVE-2019-11035: exif: fix heap-buffer-overflow in exif_iif_add_value (bug #77831)\n- CVE-2019-11036: exif: fix heap-buffer-overflow via exif_process_IFD_TAG (bug #77950)\n- CVE-2019-9641: exif: fix uninitialized read in exif_process_IFD_in_TIFF via 32-bit integer overflow (bug #77509)","status":"published","published":"2026-04-25T08:46:43Z","modified":"2026-10-21T10:47:49.75244511Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-1803-1","title":"php5 - security update","status":"published","published":"2019-05-25T00:00:00Z","modified":"2026-03-09T01:23:39.276599Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4527-1","title":"php7.3 - security update","status":"published","published":"2019-09-19T00:00:00Z","modified":"2026-03-09T02:09:17.273475Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-4529-1","title":"php7.0 - security update","status":"published","published":"2019-09-20T00:00:00Z","modified":"2026-03-09T02:09:40.186775Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2019:1572-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).\n- CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).\n- CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).\n- CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).\n- CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).\n- CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).\n- CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server\n  to cause memory read outside the allocated areas (bsc#1126821).\n- CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).\n- CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read\n  allocated and unallocated memory when parsing a phar file (bsc#1127122).\n- CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an\n  attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).\n- CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).\n- CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation\n  of rename function (bsc#1128722).\n- CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered \n  via an empty string in the message argument to imap_mail (bsc#1118832).\n- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).\n- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).\n- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).\n\nOther issue addressed:   \n\n- Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).\n- Enabled php7 testsuite (bsc#1119396).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-06-18T11:37:53Z","modified":"2026-02-04T03:03:08.565706Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1573-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).\n- CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).\n- CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).\n- CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).\n- CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).\n- CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).\n- CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server\n  to cause memory read outside the allocated areas (bsc#1126821).\n- CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).\n- CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read\n  allocated and unallocated memory when parsing a phar file (bsc#1127122).\n- CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an\n  attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).\n- CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).\n- CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation\n  of rename function (bsc#1128722).\n- CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered \n  via an empty string in the message argument to imap_mail (bsc#1118832).\n- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).\n- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).\n- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).\n\nOther issue addressed:   \n\n- Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).\n- Enabled php7 testsuite (bsc#1119396).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-06-18T11:38:13Z","modified":"2026-02-04T02:13:09.99742Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11167-1","title":"php7-7.4.24-1.1 on GA media","description":"These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:40:15.236741Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11169-1","title":"php8-8.0.11-1.1 on GA media","description":"These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:14:38.718583Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:1325-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).\n- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).\n- CVE-2019-9637: Fixed a potential information disclosure in rename() (bsc#1128892).\n- CVE-2019-9675: Fixed a potential buffer overflow in phar_tar_writeheaders_int() (bsc#1128886).\n- CVE-2019-9638: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to value_len (bsc#1128889).\n- CVE-2019-9639: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to data_len (bsc#1128887).\n- CVE-2019-9640: Fixed an invalid Read in exif_process_SOFn() (bsc#1128883).\n- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).\n","status":"published","published":"2019-05-23T13:18:02Z","modified":"2026-02-04T03:19:22.615314Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1360-1","title":"Security update for php72","description":"This update for php72 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).\n- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).\n- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).\n\nNon-security issue fixed:\n\n- Use system gd (bsc#1133714).\n","status":"published","published":"2019-05-27T13:30:37Z","modified":"2026-02-04T04:19:17.915087Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1365-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).\n- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).\n- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).\n","status":"published","published":"2019-05-28T08:52:40Z","modified":"2026-02-04T03:04:52.018494Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1461-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).\n- CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).\n- CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).\n- CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).\n- CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).\n- CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).\n- CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server\n  to cause memory read outside the allocated areas (bsc#1126821).\n- CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).\n- CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read\n  allocated and unallocated memory when parsing a phar file (bsc#1127122).\n- CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an\n  attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).\n- CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).\n- CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation\n  of rename function (bsc#1128722).\n- CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered \n  via an empty string in the message argument to imap_mail (bsc#1118832).\n- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).\n- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).\n- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).\n\nOther issue addressed:   \n\n- Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).\n- Enabled php7 testsuite (bsc#1119396).\n","status":"published","published":"2019-06-11T16:13:26Z","modified":"2026-02-04T02:39:54.035984Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2022:4067-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- Version update to 7.2.34 [jsc#SLE-23639]\n\n- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).\n- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).\n","status":"published","published":"2022-11-18T10:54:18Z","modified":"2026-02-04T04:35:00.387377Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-3566-2","title":"php5 vulnerabilities","description":"USN-3566-1 fixed several vulnerabilities in PHP. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nIt was discovered that PHP incorrectly handled certain files. An attacker\ncould possibly use this issue to access sensitive information.\n(CVE-2018-20783)\n\nIt was discovered that PHP incorrectly handled certain files. An attacker\ncould possibly use this issue to access sensitive information or possibly\ncause a crash, resulting in a denial of service. (CVE-2019-11036)\n\nOriginal advisory details:\n\n It was discovered that PHP incorrectly handled memory when unserializing\n certain data. A remote attacker could use this issue to cause PHP to crash,\n resulting in a denial of service, or possibly execute arbitrary code. This\n issue only affected Ubuntu 12.04 ESM. (CVE-2017-12933)\n\n It was discovered that PHP incorrectly handled locale length. A remote attacker\n could possibly use this issue to cause PHP to crash, resulting in a denial of service.\n This issue only affected Ubuntu 12.04 ESM. (CVE-2017-11362)\n\n It was discovered that PHP incorrectly handled certain stream metadata. A remote\n attacker could possibly use this issue to set arbitrary metadata. This issue only\n affected Ubuntu 12.04 ESM. (CVE-2016-10712)\n","status":"published","published":"2019-05-22T11:58:43Z","modified":"2026-04-22T09:43:40.044382Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-4009-1","title":"php7.0, php7.2 vulnerabilities","description":"It was discovered that PHP incorrectly handled certain exif tags in images.\nA remote attacker could use this issue to cause PHP to crash, resulting in\na denial of service, or possibly obtain sensitive information.\n(CVE-2019-11036)\n\nIt was discovered that PHP incorrectly decoding certain MIME headers. A\nremote attacker could possibly use this issue to cause PHP to crash,\nresulting in a denial of service. (CVE-2019-11039)\n\nIt was discovered that PHP incorrectly handled certain exif tags in images.\nA remote attacker could use this issue to cause PHP to crash, resulting in\na denial of service, or possibly execute arbitrary code. (CVE-2019-11040)\n","status":"published","published":"2019-06-05T15:02:36Z","modified":"2026-04-22T09:57:29.988603Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}