{"id":"CVE-2020-7068","aliases":["ALPINE-CVE-2020-7068","ALSA-2021:4213","BIT-libphp-2020-7068","BIT-php-2020-7068","BIT-php-min-2020-7068","CLSA-2021-1639681846","CLSA-2022-1643747494","DEBIAN-CVE-2020-7068","DLA-2345-1","DSA-4856-1","EUVD-2020-28202","GHSA-vc9g-5348-gqwv","RHSA-2021:2992","RHSA-2021:4213","RLSA-2021:4213","SUSE-SU-2020:2403-1","SUSE-SU-2020:2404-1","SUSE-SU-2020:2405-1","SUSE-SU-2020:2455-1","SUSE-SU-2020:2456-1","SUSE-SU-2020:2477-1","SUSE-SU-2022:4067-1","SUSE-SU-2022:4068-1","SUSE-SU-2022:4069-1","UBUNTU-CVE-2020-7068","USN-5006-1","USN-5006-2","openSUSE-SU-2020:1354-1","openSUSE-SU-2020:1356-1","openSUSE-SU-2024:11569-1"],"status":"published","title":"Use of freed hash key in the phar_parse_zipfile function","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01596,"percentile":0.76055,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2020-08-26T00:00:00Z","modified":"2026-11-03T06:32:37Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"php7","fixed_in":["7.3.22-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"php7","fixed_in":["7.2.33-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"libphp","fixed_in":["7.2.33","7.3.21","7.4.9"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php","fixed_in":["7.2.33","7.3.21","7.4.9"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php-min","fixed_in":["7.2.33","7.3.21","7.4.9"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"php7.4","fixed_in":["7.4.9-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"php7.0","fixed_in":["7.0.33-0+deb9u9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","fixed_in":["7.0.7-50.97.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php7","fixed_in":["7.0.7-50.97.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php74","fixed_in":["7.4.6-1.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php74","fixed_in":["7.4.6-1.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php72","fixed_in":["7.2.5-1.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php72","fixed_in":["7.2.5-1.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"php7","fixed_in":["7.2.5-4.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP1","package":"php7","fixed_in":["7.2.5-4.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"php7","fixed_in":["7.4.6-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP2","package":"php7","fixed_in":["7.4.6-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","fixed_in":["5.5.14-109.79.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.29+esm14"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","fixed_in":["7.0.33-0ubuntu0.16.04.16+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","fixed_in":["7.2.24-0ubuntu0.18.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","fixed_in":["7.4.3-4ubuntu2.5"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"php7","fixed_in":["7.2.5-lp151.6.32.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"php7-test","fixed_in":["7.2.5-lp151.6.32.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"php7","fixed_in":["7.4.6-lp152.2.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"php7-test","fixed_in":["7.4.6-lp152.2.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.22-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.33-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.12-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.19-3.module_el8.6.0+2976+8b9a0d08"}]}],"bundled":5},{"source":"osv","ecosystem":"Bitnami","package":"libphp","ranges":[{"type":"SEMVER","events":[{"introduced":"7.2.0"},{"fixed":"7.2.33"},{"introduced":"7.3.0"},{"fixed":"7.3.21"},{"introduced":"7.4.0"},{"fixed":"7.4.9"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php","ranges":[{"type":"SEMVER","events":[{"introduced":"7.2.0"},{"fixed":"7.2.33"},{"introduced":"7.3.0"},{"fixed":"7.3.21"},{"introduced":"7.4.0"},{"fixed":"7.4.9"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php-min","ranges":[{"type":"SEMVER","events":[{"introduced":"7.2.0"},{"fixed":"7.2.33"},{"introduced":"7.3.0"},{"fixed":"7.3.21"},{"introduced":"7.4.0"},{"fixed":"7.4.9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libapache2-mod-php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libphp7.0-embed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-bz2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-interbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-mcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-phpdbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-readline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-sybase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-xsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"php7.0-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.17"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.12-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-1.module_el8.4.0+2001+2eb69d76"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.9-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0+deb9u9"}]}],"versions":["7.0.19-1","7.0.20-1","7.0.20-2","7.0.22-1","7.0.22-2","7.0.22-3","7.0.25-1","7.0.26-1","7.0.27-0+deb9u1","7.0.27-1","7.0.28-1","7.0.29-1","7.0.30-0+deb9u1","7.0.30-1","7.0.30-2","7.0.31-1","7.0.32-1","7.0.33-0+deb9u1","7.0.33-0+deb9u2","7.0.33-0+deb9u3","7.0.33-0+deb9u5","7.0.33-0+deb9u6","7.0.33-0+deb9u7","7.0.33-0+deb9u8"]},{"source":"osv","ecosystem":"Debian:10","package":"php7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.27-1~deb10u1"}]}],"versions":["7.3.10-1","7.3.11-1~deb10u1","7.3.12-1","7.3.14-1~deb10u1","7.3.15-1","7.3.15-2","7.3.15-3","7.3.19-1~deb10u1","7.3.4-2","7.3.6-1","7.3.8-1","7.3.9-1","7.3.9-1~deb10u1"],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.29-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.12-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+11143+cc873159"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.6.0+789+2130c178"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.4.0+415+e936cba3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.19-1.module+el8.5.0+696+61e7c9ba"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.12-1.module+el8.4.0+415+e936cba3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.12-1.module+el8.6.0+789+2130c178"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.6.0+789+2130c178"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.4.0+415+e936cba3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.4.0+415+e936cba3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.6.0+789+2130c178"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.4.0+415+e936cba3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.97.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php74","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-1.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php74","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-1.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php72","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-1.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-4.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP2","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.79.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.34-150000.4.103.1"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php74","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-1.47.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"php74","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-1.47.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"php7-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.33-150200.3.46.2"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm14"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10","5.5.9+dfsg-1ubuntu4.29+esm11","5.5.9+dfsg-1ubuntu4.29+esm12","5.5.9+dfsg-1ubuntu4.29+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.16+esm1"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12","7.0.33-0ubuntu0.16.04.14","7.0.33-0ubuntu0.16.04.15","7.0.33-0ubuntu0.16.04.16"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.8"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3","7.2.24-0ubuntu0.18.04.4","7.2.24-0ubuntu0.18.04.6","7.2.24-0ubuntu0.18.04.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.5"}]}],"versions":["7.4.3-4build1","7.4.3-4build2","7.4.3-4ubuntu1","7.4.3-4ubuntu1.1","7.4.3-4ubuntu2.2","7.4.3-4ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.8"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3","7.2.24-0ubuntu0.18.04.4","7.2.24-0ubuntu0.18.04.6","7.2.24-0ubuntu0.18.04.7"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.5"}]}],"versions":["7.4.3-4build1","7.4.3-4build2","7.4.3-4ubuntu1","7.4.3-4ubuntu1.1","7.4.3-4ubuntu2.2","7.4.3-4ubuntu2.4"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm14"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10","5.5.9+dfsg-1ubuntu4.29+esm11","5.5.9+dfsg-1ubuntu4.29+esm12","5.5.9+dfsg-1ubuntu4.29+esm13"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.16+esm1"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12","7.0.33-0ubuntu0.16.04.14","7.0.33-0ubuntu0.16.04.15","7.0.33-0ubuntu0.16.04.16"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-lp151.6.32.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"php7-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.5-lp151.6.32.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-lp152.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"php7-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.6-lp152.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.24-2.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"php","product":"php"},{"vendor":"php group","product":"php"},{"vendor":"tenable","product":"tenable.sc"}],"references":[{"url":"https://bugs.php.net/bug.php?id=79797","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202009-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200918-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4856","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2021-14","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7068","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-vc9g-5348-gqwv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-7068","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-4213.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-7068","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7069","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7070","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7071","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-21702","tags":["report"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1639681846","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1643747494.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-7068","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2992","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978755","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2992.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7068","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7068","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7069","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7069","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7070","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7071","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7071","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7071","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21702","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21702","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21702","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21705","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=81122","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4213","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4213.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4213","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202403-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175223","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7068","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202404-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202405-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202455-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173786","tags":["report"]},{"url":"https://bugzilla.suse.com/1174010","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202456-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202477-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224067-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204577","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37454","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224068-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203867","tags":["report"]},{"url":"https://bugzilla.suse.com/1203870","tags":["report"]},{"url":"https://bugzilla.suse.com/1204979","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31630","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224069-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-7068","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5006-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5006-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-7071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-21702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-21704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-21705","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D7TUBJ6OO4AHXVRZF75IYUYR5625M6EK/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D5TUJURUJX2AK6R6RDFANH6JQNPJPHJR/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-7068","title":"Use of freed hash key in the phar_parse_zipfile function","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2020-09-09T17:58:42.837Z","modified":"2024-09-17T00:36:03.824Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:58.331892Z"}],"euvd":[{"id":"EUVD-2020-28202","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2020-09-09T17:58:42Z","modified":"2024-09-17T00:36:03Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:28:57.378482Z"}],"ghsa":[{"id":"GHSA-vc9g-5348-gqwv","title":"In PHP versions 7.2.x below 7.3.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing...","description":"In PHP versions 7.2.x below 7.3.21, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2022-05-24T17:27:48Z","modified":"2023-01-27T05:02:31Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"low"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:42:03.588739Z"}],"nvd":[{"id":"CVE-2020-7068","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2020-09-09T18:15:23.4Z","modified":"2026-06-17T03:24:18.233Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:14.981587Z"}],"osv":[{"id":"ALPINE-CVE-2020-7068","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2020-09-09T18:15:23.4Z","modified":"2026-11-03T06:32:37.711212795Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"low"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2020-7068","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2020-09-09T18:15:23.4Z","modified":"2026-10-24T10:30:46.587267972Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:17.34531Z"},{"id":"DEBIAN-CVE-2020-7068","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2020-09-09T18:15:23.4Z","modified":"2026-08-27T13:03:15.578299341Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"RHSA-2021:2992","title":"Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:45:17Z","modified":"2026-06-29T10:36:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4213","title":"Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:46:32Z","modified":"2026-06-29T10:37:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4213","title":"Moderate: php:7.4 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.4.19). (BZ#1944110)\n\nSecurity Fix(es):\n\n* php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)\n\n* php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)\n\n* php: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)\n\n* php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server (CVE-2020-7070)\n\n* php: NULL pointer dereference in SoapClient (CVE-2021-21702)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:42:20Z","modified":"2026-02-05T05:00:13.521189Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-7068","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2020-09-09T18:15:00Z","modified":"2026-04-22T12:42:59.969805Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"low"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ALSA-2021:4213","title":"Moderate: php:7.4 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.4.19). (BZ#1944110)\n\nSecurity Fix(es):\n\n* php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)\n\n* php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)\n\n* php: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)\n\n* php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server (CVE-2020-7070)\n\n* php: NULL pointer dereference in SoapClient (CVE-2021-21702)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:42:20Z","modified":"2026-10-29T11:01:09.380175591Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-libphp-2020-7068","title":"Use of freed hash key in the phar_parse_zipfile function","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2025-08-11T13:53:13.129Z","modified":"2026-09-10T16:01:00.974080492Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-php-2020-7068","title":"Use of freed hash key in the phar_parse_zipfile function","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2024-03-06T11:06:18.071Z","modified":"2026-09-10T16:00:11.476832804Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"BIT-php-min-2020-7068","title":"Use of freed hash key in the phar_parse_zipfile function","description":"In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.","status":"published","published":"2025-01-14T19:23:24.202Z","modified":"2026-09-10T16:01:44.921784054Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2021-1639681846","title":"Fix CVE(s): CVE-2020-7071, CVE-2020-7068, CVE-2021-21705, CVE-2021-21704, CVE-2021-21703, CVE-2021-21702","description":"\n   * SECURITY UPDATE: Process crash and information disclosure\n     - debian/patches/CVE-2020-7068.patch: fix access-after-free for\n       actual_alias pointer\n     - CVE-2020-7068\n   * SECURITY UPDATE: logic error due to invalid input validation\n     - debian/patches/CVE-2020-7071.patch: add validation fo url-\u003euser field\n     - CVE-2020-7071\n   * SECURITY UPDATE: program crash due to null pointer dereference\n     - debian/patches/CVE-2021-21702.patch: pass empty string instead for NULL\n       pointers to soap_error1(). Check NULL pointer in attr_is_equal_ex() and\n       node_is_equal_ex()\n     - CVE-2021-21702\n   * SECURITY UPDATE: integer overflow and subsequent incorrect buffer allocation\n     - debian/patches/CVE-2021-21704.patch: add checks that prevent the overflow,\n       replace strcat() with more secure strlcat()\n     - CVE-2021-21704\n   * SECURITY UPDATE: logic error due to incorrect input validation\n     - debian/patches/CVE-2021-21705.patch: fix validation of url password with\n       FILTER_VALIDATE_URL parameter,\n     - CVE-2021-21705\n   * SECURITY UPDATE: priv escalation due to shared memory between worker processes\n     - debian/patches/CVE-2021-21703.patch: change scoreboard-\u003eproc type to array of\n       structs and use scoreboard-\u003enprocs only in child processes\n     - CVE-2021-21703","status":"published","published":"2021-12-16T19:10:46Z","modified":"2026-06-04T10:03:57.983596111Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1643747494","title":"Fix of CVE: CVE-2020-7071, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2021-21702","description":"\n- CVE-2020-7068: php: Use of freed hash key in the phar_parse_zipfile function\n- CVE-2020-7069: php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV\n- CVE-2020-7070: php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server\n- CVE-2020-7071: php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo\n- CVE-2021-21702: php: NULL pointer dereference in SoapClient","status":"published","published":"2022-02-01T20:31:34Z","modified":"2026-10-21T10:47:07.602318461Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2345-1","title":"php7.0 - security update","status":"published","published":"2020-08-26T00:00:00Z","modified":"2026-03-09T01:18:55.886013Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4856-1","title":"php7.3 - security update","status":"published","published":"2021-02-17T00:00:00Z","modified":"2026-03-09T02:11:01.702115Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2020:1354-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).\n- Do not install outdated README.SUSE (bsc#1174010).\n- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-09-07T08:26:02Z","modified":"2026-02-04T04:37:59.310447Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1356-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-09-07T08:26:38Z","modified":"2026-02-04T03:14:05.171757Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11569-1","title":"php7-7.4.24-2.1 on GA media","description":"These are all security issues fixed in the php7-7.4.24-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:12:14.999734Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:2403-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- fix CVE-2020-7068 [bsc#1175223]: Use of freed hash key in the phar_parse_zipfile function\n","status":"published","published":"2020-09-01T08:04:05Z","modified":"2026-02-04T03:20:48.53221Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2404-1","title":"Security update for php74","description":"This update for php74 fixes the following issues:\n\n- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).\n","status":"published","published":"2020-09-01T08:04:27Z","modified":"2026-02-04T04:24:33.75264Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2405-1","title":"Security update for php72","description":"This update for php72 fixes the following issues:\n\n- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).\n","status":"published","published":"2020-09-01T08:04:50Z","modified":"2026-02-04T02:28:25.117602Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2455-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).\n- Do not install outdated README.SUSE (bsc#1174010).\n- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786).\n","status":"published","published":"2020-09-02T12:01:13Z","modified":"2026-02-04T03:02:12.078482Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2456-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).\n","status":"published","published":"2020-09-02T12:02:08Z","modified":"2026-02-04T02:53:27.352941Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2477-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\n- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).\n","status":"published","published":"2020-09-03T10:12:35Z","modified":"2026-02-04T04:14:39.91214Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2022:4067-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- Version update to 7.2.34 [jsc#SLE-23639]\n\n- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).\n- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).\n","status":"published","published":"2022-11-18T10:54:18Z","modified":"2026-02-04T04:35:00.387377Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4068-1","title":"Security update for php74","description":"This update for php74 fixes the following issues:\n\n- Version update to 7.4.33:\n- CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979).\n- CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).\n\n- Version update to 7.4.32 (jsc#SLE-23639)\n- CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867)\n- CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)\n","status":"published","published":"2022-11-18T10:55:22Z","modified":"2026-02-04T02:31:07.533852Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4069-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\n- Version update to 7.4.33:\n- CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979).\n- CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).\n\n- Version update to 7.4.32 (jsc#SLE-23639)\n- CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867)\n- CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)\n","status":"published","published":"2022-11-18T10:56:52Z","modified":"2026-02-04T02:13:47.996905Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5006-1","title":"php7.2, php7.4 vulnerabilities","description":"It was discovered that PHP incorrectly handled certain PHAR files. A remote\nattacker could possibly use this issue to cause PHP to crash, resulting in\na denial of service, or possibly obtain sensitive information. This issue\nonly affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-7068)\n\nIt was discovered that PHP incorrectly handled parsing URLs with passwords.\nA remote attacker could possibly use this issue to cause PHP to mis-parse\nthe URL and produce wrong data. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 20.10. (CVE-2020-7071)\n\nIt was discovered that PHP incorrectly handled certain malformed XML data\nwhen being parsed by the SOAP extension. A remote attacker could possibly\nuse this issue to cause PHP to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu\n20.10. (CVE-2021-21702)\n\nIt was discovered that PHP incorrectly handled the pdo_firebase module. A\nremote attacker could possibly use this issue to cause PHP to crash,\nresulting in a denial of service. (CVE-2021-21704)\n\nIt was discovered that PHP incorrectly handled the FILTER_VALIDATE_URL\ncheck. A remote attacker could possibly use this issue to perform a server-\nside request forgery attack. (CVE-2021-21705)\n","status":"published","published":"2021-07-07T12:11:57Z","modified":"2026-04-22T10:15:24.753732Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5006-2","title":"php5, php7.0 vulnerabilities","description":"USN-5006-1 fixed several vulnerabilities in PHP. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that PHP incorrectly handled certain PHAR files. A remote\n attacker could possibly use this issue to cause PHP to crash, resulting in\n a denial of service, or possibly obtain sensitive information. (CVE-2020-7068)\n\n It was discovered that PHP incorrectly handled parsing URLs with passwords.\n A remote attacker could possibly use this issue to cause PHP to mis-parse\n the URL and produce wrong data. (CVE-2020-7071)\n\n It was discovered that PHP incorrectly handled certain malformed XML data\n when being parsed by the SOAP extension. A remote attacker could possibly\n use this issue to cause PHP to crash, resulting in a denial of service.\n (CVE-2021-21702)\n\n It was discovered that PHP incorrectly handled the pdo_firebase module. A\n remote attacker could possibly use this issue to cause PHP to crash,\n resulting in a denial of service. (CVE-2021-21704)\n\n It was discovered that PHP incorrectly handled the FILTER_VALIDATE_URL\n check. A remote attacker could possibly use this issue to perform a server-\n side request forgery attack. (CVE-2021-21705)\n","status":"published","published":"2021-07-13T12:01:13Z","modified":"2026-06-29T13:49:26.837056254Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}