{"id":"CVE-2020-7063","aliases":["ALPINE-CVE-2020-7063","ALSA-2020:3662","BIT-libphp-2020-7063","BIT-php-2020-7063","BIT-php-min-2020-7063","DEBIAN-CVE-2020-7063","DLA-2160-1","DSA-4717-1","DSA-4719-1","EUVD-2020-28197","GHSA-rm3c-r6h9-r9rg","MGASA-2020-0119","RHSA-2020:3662","RHSA-2020:5275","RLSA-2020:3662","SUSE-SU-2020:0622-1","SUSE-SU-2020:0647-1","SUSE-SU-2020:0658-1","SUSE-SU-2022:4067-1","UBUNTU-CVE-2020-7063","USN-4330-1","openSUSE-SU-2020:0341-1","openSUSE-SU-2024:11167-1","openSUSE-SU-2024:11169-1"],"status":"published","title":"Files added to tar with Phar::buildFromIterator have all-access permissions","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01594,"percentile":0.75891,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-281"],"published":"2020-02-27T20:25:15Z","modified":"2026-11-03T06:32:26Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"php7","fixed_in":["7.3.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"php7","fixed_in":["7.3.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"php7","fixed_in":["7.3.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"php7","fixed_in":["7.3.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"php7","fixed_in":["7.3.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"php7","fixed_in":["7.2.31-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"libphp","fixed_in":["7.2.28","7.3.15","7.4.3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php","fixed_in":["7.2.28","7.3.15","7.4.3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php-min","fixed_in":["7.2.28","7.3.15","7.4.3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"php7.4","fixed_in":["7.4.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.29+esm11"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","fixed_in":["7.0.33-0ubuntu0.16.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","fixed_in":["7.2.24-0ubuntu0.18.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.31-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Bitnami","package":"libphp","ranges":[{"type":"SEMVER","events":[{"introduced":"7.2.0"},{"fixed":"7.2.28"},{"introduced":"7.3.0"},{"fixed":"7.3.15"},{"introduced":"7.4.0"},{"fixed":"7.4.3"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php","ranges":[{"type":"SEMVER","events":[{"introduced":"7.2.0"},{"fixed":"7.2.28"},{"introduced":"7.3.0"},{"fixed":"7.3.15"},{"introduced":"7.4.0"},{"fixed":"7.4.3"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php-min","ranges":[{"type":"SEMVER","events":[{"introduced":"7.2.0"},{"fixed":"7.2.28"},{"introduced":"7.3.0"},{"fixed":"7.3.15"},{"introduced":"7.4.0"},{"fixed":"7.4.3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.40+dfsg-0+deb8u10"}]}],"versions":["5.6.11+dfsg-1","5.6.12+dfsg-0+deb8u1","5.6.12+dfsg-1","5.6.13+dfsg-0+deb8u1","5.6.13+dfsg-1","5.6.13+dfsg-2","5.6.14+dfsg-0+deb8u1","5.6.14+dfsg-1","5.6.15+dfsg-1","5.6.16+dfsg-1","5.6.16+dfsg-2","5.6.16+dfsg-3","5.6.16+dfsg-4","5.6.17+dfsg-0+deb8u1","5.6.17+dfsg-1","5.6.17+dfsg-3","5.6.18+dfsg-1","5.6.19+dfsg-0+deb8u1","5.6.19+dfsg-1","5.6.19+dfsg-2","5.6.20+dfsg-0+deb8u1","5.6.20+dfsg-1","5.6.21+dfsg-1","5.6.21+dfsg-2","5.6.22+dfsg-0+deb8u1","5.6.22+dfsg-1","5.6.22+dfsg-2","5.6.23+dfsg-0+deb8u1","5.6.23+dfsg-1","5.6.24+dfsg-0+deb8u1","5.6.24+dfsg-1","5.6.26+dfsg-0+deb8u1","5.6.26+dfsg-1","5.6.27+dfsg-0+deb8u1","5.6.28+dfsg-0+deb8u1","5.6.29+dfsg-0+deb8u1","5.6.30+dfsg-0+deb8u1","5.6.33+dfsg-0+deb8u1","5.6.36+dfsg-0+deb8u1","5.6.37+dfsg-0+deb8u1","5.6.38+dfsg-0+deb8u1","5.6.39+dfsg-0+deb8u1","5.6.39+dfsg-0+deb8u2","5.6.40+dfsg-0+deb8u1","5.6.40+dfsg-0+deb8u2","5.6.40+dfsg-0+deb8u3","5.6.40+dfsg-0+deb8u4","5.6.40+dfsg-0+deb8u5","5.6.40+dfsg-0+deb8u6","5.6.40+dfsg-0+deb8u7","5.6.40+dfsg-0+deb8u8","5.6.40+dfsg-0+deb8u9","5.6.7+dfsg-1","5.6.9+dfsg-0+deb8u1","5.6.9+dfsg-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0+deb9u8"}]}],"versions":["7.0.19-1","7.0.20-1","7.0.20-2","7.0.22-1","7.0.22-2","7.0.22-3","7.0.25-1","7.0.26-1","7.0.27-0+deb9u1","7.0.27-1","7.0.28-1","7.0.29-1","7.0.30-0+deb9u1","7.0.30-1","7.0.30-2","7.0.31-1","7.0.32-1","7.0.33-0+deb9u1","7.0.33-0+deb9u2","7.0.33-0+deb9u3","7.0.33-0+deb9u5","7.0.33-0+deb9u6","7.0.33-0+deb9u7"],"bundled":6},{"source":"osv","ecosystem":"Debian:10","package":"php7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-1~deb10u1"}]}],"versions":["7.3.10-1","7.3.11-1~deb10u1","7.3.12-1","7.3.14-1~deb10u1","7.3.15-1","7.3.15-2","7.3.15-3","7.3.4-2","7.3.6-1","7.3.8-1","7.3.9-1","7.3.9-1~deb10u1"],"bundled":7},{"source":"osv","ecosystem":"Mageia:7","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.15-1.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.52.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.52.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.52.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.52.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.52.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.71.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.71.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm11"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.14"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.4"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm11"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.14"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.4"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-lp151.6.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"php7-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-lp151.6.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.24-1.1"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-1.1"}]}],"bundled":97}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"leap"},{"vendor":"php","product":"php"},{"vendor":"php group","product":"php"},{"vendor":"tenable","product":"tenable.sc"}],"references":[{"url":"https://bugs.php.net/bug.php?id=79082","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","advisory","evidence"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-57","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4330-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4717","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4719","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2021-14","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7063","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-rm3c-r6h9-r9rg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-7063","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-3662.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-11039","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11040","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11041","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11042","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11045","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11047","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11048","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11050","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13224","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13225","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16163","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19203","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19204","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19246","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-20454","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7059","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7060","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7062","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7063","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7064","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7065","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7066","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-7063","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0119.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26234","tags":["report"]},{"url":"https://www.php.net/ChangeLog-7.php#7.3.15","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3662","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837842","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3662.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11047","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11048","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11050","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11050","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16163","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19203","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19246","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19246","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7059","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7060","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7060","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7062","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7062","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7063","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7063","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7064","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79282","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7065","tags":["advisory"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_3","tags":["article"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7066","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7066","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79329","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5275","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.6_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5275.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:3662","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200622-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1162629","tags":["report"]},{"url":"https://bugzilla.suse.com/1162632","tags":["report"]},{"url":"https://bugzilla.suse.com/1165280","tags":["report"]},{"url":"https://bugzilla.suse.com/1165289","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7063","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200647-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200658-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224067-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204577","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37454","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-7063","tags":["report"]},{"url":"http://git.php.net/?p=php-src.git;a=commit;h=ead40a66785aedaa393f953a0ed9224adaf040cd","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4330-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-7062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-7064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-7065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-7066","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DYGQUQU4K7P2FQVP7DXL3O47ATEEDZED/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3415","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-7063","title":"Files added to tar with Phar::buildFromIterator have all-access permissions","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2020-02-27T20:25:15.606Z","modified":"2024-09-16T16:49:14.274Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28197","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2020-02-27T20:25:15Z","modified":"2024-09-16T16:49:14Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:55:47.716817Z"}],"ghsa":[{"id":"GHSA-rm3c-r6h9-r9rg","title":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR...","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2022-05-24T17:09:52Z","modified":"2023-01-29T05:01:40Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:44:53.095202Z"}],"nvd":[{"id":"CVE-2020-7063","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2020-02-27T21:15:19.117Z","modified":"2026-06-17T03:24:17.493Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:05:54.796125Z"}],"osv":[{"id":"ALPINE-CVE-2020-7063","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2020-02-27T21:15:19.117Z","modified":"2026-11-03T06:32:26.343074226Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-7063","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2020-02-27T21:15:19.117Z","modified":"2026-10-24T10:31:01.251338605Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:17.34531Z"},{"id":"DEBIAN-CVE-2020-7063","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2020-02-27T21:15:19.117Z","modified":"2026-08-27T13:03:15.866453404Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"RHSA-2020:3662","title":"Red Hat Security Advisory: php:7.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:36:11Z","modified":"2026-08-18T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5275","title":"Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:43:43Z","modified":"2026-08-18T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-02-04T20:15:13.875002Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-7063","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2020-02-27T21:15:00Z","modified":"2026-04-22T12:43:42.955454Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ALSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-10-29T11:00:19.53000927Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-libphp-2020-7063","title":"Files added to tar with Phar::buildFromIterator have all-access permissions","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2025-08-11T13:53:03.834Z","modified":"2026-09-08T08:45:14.405944984Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-php-2020-7063","title":"Files added to tar with Phar::buildFromIterator have all-access permissions","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2024-03-06T11:07:12.498Z","modified":"2026-09-08T08:48:17.922704509Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"BIT-php-min-2020-7063","title":"Files added to tar with Phar::buildFromIterator have all-access permissions","description":"In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.","status":"published","published":"2025-01-14T19:23:56.313Z","modified":"2026-09-08T08:47:35.991053528Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"DLA-2160-1","title":"php5 - security update","status":"published","published":"2020-03-26T00:00:00Z","modified":"2026-03-09T01:22:03.733044Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4717-1","title":"php7.0 - security update","status":"published","published":"2020-07-05T00:00:00Z","modified":"2026-03-09T02:09:35.447934Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"DSA-4719-1","title":"php7.3 - security update","status":"published","published":"2020-07-06T00:00:00Z","modified":"2026-03-09T02:11:26.803101Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0119","title":"Updated php packages fix bugs and security vulnerabilities","description":"Updated php packages fix bugs and security vulnerabilities:\n\nCore:\n- Fixed bug #71876 (Memory corruption htmlspecialchars(): charset `*'\n  not supported).\n- Fixed bug #79146 (cscript can fail to run on some systems).\n- Fixed bug #78323 (Code 0 is returned on invalid options).\n- Fixed bug #76047 (Use-after-free when accessing already destructed\n  backtrace arguments).\nCURL:\n- Fixed bug #79078 (Hypothetical use-after-free in curl_multi_add_handle()).\nIntl:\n- Fixed bug #79212 (NumberFormatter::format() may detect wrong type).\nLibxml:\n- Fixed bug #79191 (Error in SoapClient ctor disables DOMDocument::save()).\nMBString:\n- Fixed bug #79154 (mb_convert_encoding() can modify $from_encoding).\nMySQLnd:\n- Fixed bug #79084 (mysqlnd may fetch wrong column indexes with MYSQLI_BOTH).\nOpenSSL:\n- Fixed bug #79145 (openssl memory leak).\nPhar:\n- Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have\n  all-access permissions). (CVE-2020-7063)\n- Fixed bug #79171 (heap-buffer-overflow in phar_extract_file).\n  (CVE-2020-7061)\n- Fixed bug #76584 (PharFileInfo::decompress not working).\nReflection:\n- Fixed bug #79115 (ReflectionClass::isCloneable call reflected class\n  __destruct).\nSession:\n- Fixed bug #79221 (Null Pointer Dereference in PHP Session Upload\n  Progress). (CVE-2020-7062)\nSPL:\n- Fixed bug #79151 (heap use after free caused by\n  spl_dllist_it_helper_move_forward).\nStandard:\n- Fixed bug #78902 (Memory leak when using stream_filter_append).\nXSL:\n- Fixed bug #70078 (XSL callbacks with nodes as parameter leak memory).\n","status":"published","published":"2020-03-06T16:13:58Z","modified":"2026-04-16T04:43:19.60016051Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0341-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality \n  under specific circumstances (bsc#1165280).\n- CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289).\n- CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to \n  denial of service (bsc#1162629).\n- CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which  may have  led to \n  memory corruption (bsc#1162632). \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-15T05:15:08Z","modified":"2026-02-04T03:05:53.159881Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11167-1","title":"php7-7.4.24-1.1 on GA media","description":"These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:40:15.236741Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11169-1","title":"php8-8.0.11-1.1 on GA media","description":"These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:14:38.718583Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:0622-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality \n  under specific circumstances (bsc#1165280).\n- CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289).\n- CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to \n  denial of service (bsc#1162629).\n- CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which  may have  led to \n  memory corruption (bsc#1162632). \n","status":"published","published":"2020-03-09T15:16:07Z","modified":"2026-02-04T03:42:00.443432Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0647-1","title":"Security update for php72","description":"This update for php72 fixes the following issues:\n\n- CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality \n  under specific circumstances (bsc#1165280).\n- CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289).\t  \n","status":"published","published":"2020-03-11T14:11:12Z","modified":"2026-02-04T02:30:28.769157Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0658-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\n- CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality \n  under specific circumstances (bsc#1165280).\n- CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289).\t  \n","status":"published","published":"2020-03-12T14:51:19Z","modified":"2026-02-04T04:28:02.182851Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2022:4067-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- Version update to 7.2.34 [jsc#SLE-23639]\n\n- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).\n- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).\n","status":"published","published":"2022-11-18T10:54:18Z","modified":"2026-02-04T04:35:00.387377Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-4330-1","title":"php5, php7.0, php7.2, php7.3 vulnerabilities","description":"\nIt was discovered that PHP incorrectly handled certain file uploads.\nAn attacker could possibly use this issue to cause a crash.\n(CVE-2020-7062)\n\nIt was discovered that PHP incorrectly handled certain PHAR archive files.\nAn attacker could possibly use this issue to access sensitive information.\n(CVE-2020-7063)\n\nIt was discovered that PHP incorrectly handled certain EXIF files.\nAn attacker could possibly use this issue to access sensitive information\nor cause a crash. (CVE-2020-7064)\n\nIt was discovered that PHP incorrectly handled certain UTF strings.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue only affected Ubuntu 19.10. (CVE-2020-7065)\n\nIt was discovered that PHP incorrectly handled certain URLs.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 19.10.\n(CVE-2020-7066)\n","status":"published","published":"2020-04-15T13:09:42Z","modified":"2026-04-22T10:03:47.538483Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}