CLSA-2026-1791531340

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791531340
Upstream
CVE (5)
  • CVE-2026-91766
  • CVE-2026-91767
  • CVE-2026-91768
  • CVE-2026-91769
  • CVE-2026-93682
Published
2026-10-09T07:36:03Z
Modified
2026-10-26T09:32:06Z
Summary
Fix of 10 CVEs
Details
  • SECURITY UPDATE: credentials leaked to another origin on HTTP redirects
    • debian/patches/CVE-2026-91766.patch: strip the Authorization, Cookie and Proxy-Authorization user headers when a redirect changes the scheme, host or port, and remove whole header lines in ext/standard/http_fopen_wrapper.c
    • CVE-2026-91766
  • SECURITY UPDATE: heap over-read in TLS wildcard certificate name matching
    • debian/patches/CVE-2026-91767.patch: include the wildcard prefix length in the subject length check so memchr() cannot read past the peer name in ext/openssl/xp_ssl.c
    • CVE-2026-91767
  • SECURITY UPDATE: FastCGI allowed_clients matched IPv6 clients on a /96 prefix
    • debian/patches/CVE-2026-91768.patch: compare the full 16-byte IPv6 address in fcgi_is_allowed() in main/fastcgi.c
    • CVE-2026-91768
  • SECURITY UPDATE: TLS peer name check fell back to the certificate CN when the certificate has a service identity
    • debian/patches/CVE-2026-91769.patch: do not fall back to the Common Name when the certificate has a DNS, URI or SRV subjectAltName in ext/openssl/xp_ssl.c
    • CVE-2026-91769
  • SECURITY UPDATE: heap over-read on an empty Location header in HTTP redirects
    • debian/patches/CVE-2026-93682.patch: use the stored Location length instead of strlen() and of reading the second byte when resolving a relative redirect in ext/standard/http_fopen_wrapper.c
    • CVE-2026-93682
References

Affected packages

TuxCare:Ubuntu:20.04
libapache2-mod-php7.4

Package

Name
libapache2-mod-php7.4
Purl
pkg:deb/tuxcare/libapache2-mod-php7.4?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
libphp7.4-embed

Package

Name
libphp7.4-embed
Purl
pkg:deb/tuxcare/libphp7.4-embed?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4

Package

Name
php7.4
Purl
pkg:deb/tuxcare/php7.4?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-bcmath

Package

Name
php7.4-bcmath
Purl
pkg:deb/tuxcare/php7.4-bcmath?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-bz2

Package

Name
php7.4-bz2
Purl
pkg:deb/tuxcare/php7.4-bz2?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-cgi

Package

Name
php7.4-cgi
Purl
pkg:deb/tuxcare/php7.4-cgi?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-cli

Package

Name
php7.4-cli
Purl
pkg:deb/tuxcare/php7.4-cli?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-common

Package

Name
php7.4-common
Purl
pkg:deb/tuxcare/php7.4-common?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-curl

Package

Name
php7.4-curl
Purl
pkg:deb/tuxcare/php7.4-curl?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-dba

Package

Name
php7.4-dba
Purl
pkg:deb/tuxcare/php7.4-dba?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-dev

Package

Name
php7.4-dev
Purl
pkg:deb/tuxcare/php7.4-dev?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-enchant

Package

Name
php7.4-enchant
Purl
pkg:deb/tuxcare/php7.4-enchant?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-fpm

Package

Name
php7.4-fpm
Purl
pkg:deb/tuxcare/php7.4-fpm?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-gd

Package

Name
php7.4-gd
Purl
pkg:deb/tuxcare/php7.4-gd?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-gmp

Package

Name
php7.4-gmp
Purl
pkg:deb/tuxcare/php7.4-gmp?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-imap

Package

Name
php7.4-imap
Purl
pkg:deb/tuxcare/php7.4-imap?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-interbase

Package

Name
php7.4-interbase
Purl
pkg:deb/tuxcare/php7.4-interbase?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-intl

Package

Name
php7.4-intl
Purl
pkg:deb/tuxcare/php7.4-intl?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-json

Package

Name
php7.4-json
Purl
pkg:deb/tuxcare/php7.4-json?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-ldap

Package

Name
php7.4-ldap
Purl
pkg:deb/tuxcare/php7.4-ldap?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-mbstring

Package

Name
php7.4-mbstring
Purl
pkg:deb/tuxcare/php7.4-mbstring?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-mysql

Package

Name
php7.4-mysql
Purl
pkg:deb/tuxcare/php7.4-mysql?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-odbc

Package

Name
php7.4-odbc
Purl
pkg:deb/tuxcare/php7.4-odbc?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-opcache

Package

Name
php7.4-opcache
Purl
pkg:deb/tuxcare/php7.4-opcache?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-pgsql

Package

Name
php7.4-pgsql
Purl
pkg:deb/tuxcare/php7.4-pgsql?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-phpdbg

Package

Name
php7.4-phpdbg
Purl
pkg:deb/tuxcare/php7.4-phpdbg?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-pspell

Package

Name
php7.4-pspell
Purl
pkg:deb/tuxcare/php7.4-pspell?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-readline

Package

Name
php7.4-readline
Purl
pkg:deb/tuxcare/php7.4-readline?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-snmp

Package

Name
php7.4-snmp
Purl
pkg:deb/tuxcare/php7.4-snmp?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-soap

Package

Name
php7.4-soap
Purl
pkg:deb/tuxcare/php7.4-soap?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-sqlite3

Package

Name
php7.4-sqlite3
Purl
pkg:deb/tuxcare/php7.4-sqlite3?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-sybase

Package

Name
php7.4-sybase
Purl
pkg:deb/tuxcare/php7.4-sybase?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-tidy

Package

Name
php7.4-tidy
Purl
pkg:deb/tuxcare/php7.4-tidy?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-xml

Package

Name
php7.4-xml
Purl
pkg:deb/tuxcare/php7.4-xml?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-xmlrpc

Package

Name
php7.4-xmlrpc
Purl
pkg:deb/tuxcare/php7.4-xmlrpc?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-xsl

Package

Name
php7.4-xsl
Purl
pkg:deb/tuxcare/php7.4-xsl?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"
php7.4-zip

Package

Name
php7.4-zip
Purl
pkg:deb/tuxcare/php7.4-zip?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791531340.json"