[CLSA-2026:1786470878] php: Fix of CVE-2026-7260
Type:
security
Severity:
Important
Release date:
2026-08-11 17:54:48 UTC
Description:
- CVE-2026-7260: fix phar circular symlink crash by replacing recursive phar_get_link_source() with an iterative Floyd cycle-detection walk in ext/phar/util.c (GHSA-vc5h-9ppw-p5f3); add regression test ext/phar/tests/tar/ghsa-vc5h-9ppw-p5f3-symlink-circular.phpt
CVEs fixed:
Updated packages:
  • php-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:6af78e4faeca398f0136ec24f11ff6d62888e4cc6ab04f60260ca061994fe66d
  • php-bcmath-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:3f6624f65b811441bfc97c99538166918b529dbf1456b2d1255905f894756cb6
  • php-cli-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:9506bad00d445f97b8313ec96010fac054fe62c2b4b8219200cdf87e8bdcd083
  • php-common-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:8104458ff7a311e3801a41d53b1a967821b3ecdfe51e0126f8ada24752abf2c3
  • php-dba-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:fdd7849047f36f0bb62cf32375d31c79c71fef807113c07d5e514da7d52c8e77
  • php-dbg-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:5095e155e57dd63f2bc520498db5f5a50fcbf32a5cc6d8858e91d8510896e7de
  • php-devel-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:b4b816f8bed2d3de72ff1dcb60028c6299250cb4728237ad158d3d8ad014022e
  • php-embedded-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:d37c655125c327db531cb4e6834c6266c21332a32efa8f2abadc07c98772b2da
  • php-enchant-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:b813d7a2e1f5badd78f48c851c48a1b6e9bf72ddc308fa1ef0f9edbd867405ff
  • php-ffi-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:98ea0a3b7cb663d37e7cac514153641efa78229dfc8955af09a9dc05bc57cad3
  • php-fpm-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:12ddff881546e3ad775a239b193de65301f5f9f381653377acc415f85670fe48
  • php-gd-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:ac30a9eb144172eeba0f0abd5e87f41be525e0c27a7092969d9775bf63b527f1
  • php-gmp-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:f22c787479f00eeb92843d053e32b4523c48ef9355173f703c071121375f6f67
  • php-intl-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:50d9d537edfab81c1541fb34112cda1b66e5068d9c277af8539367baf3c930e8
  • php-ldap-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:84384949de3a6edf9acc9ee11c1b503e4300e0807442189a54c0ce43838225a7
  • php-mbstring-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:bc620a8b3872bb61878c9b5cd8054969a129f53a16c6f75f7959b5adf0b560c5
  • php-mysqlnd-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:3969be1457118c301ea746a6210e856362ad7cc0a21308986bdfa8a1fcf8bd12
  • php-odbc-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:9bd033a9c326ed7afa0f4755f917d0aa1165990d6e331b5aff610cbbdf5857ab
  • php-opcache-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:e4c90a74640c050df7427a3ad7c560deeb046405dff52061f338b81d0dfbe3f5
  • php-pdo-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:91ea442aab74253b4d27432597d052a1b06ba75920660232d3fff9be34cbe4c9
  • php-pgsql-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:c2c75bb7cb8e2f5b694a62daa870ad7b40fe2b5fe3a407976df20505a3580c95
  • php-process-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:76672117f27d9061f66314a84ffb6fb320c828f451191a487a299980b644ce3f
  • php-snmp-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:c3f78593c7bd13eaacdfdd77ec13446345c58f18f6465612f8fdc7bf5459d479
  • php-soap-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:530eb9c49b38ae864d5817186506b6c9737da7c7cfa01a3ac82049f74ab9f447
  • php-xml-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:26433d5a9f8a0b6b17d63980333adde2af1e254201475fc8bfb4e9cb56bc0ca3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.