[CLSA-2026:1785856885] php: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-04 15:21:38 UTC
Description:
- CVE-2026-7260: restore the path separator in phar_get_link_location() so the cycle walk stays idempotent (GHSA-vc5h-9ppw-p5f3)
CVEs fixed:
Updated packages:
  • php-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:ead9aad300fd07f7ac23858bbe98142e582eb0b303d1198ca8bc37aaf1c68c4e
  • php-bcmath-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:fcc4fff58117594486f13a49ee5e5a6ae401949c4b0d6a1bcfa347c4af4f18f1
  • php-cli-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:c7a481a0379d2bd5f93bee994c1d09c4ab7026719eed70548b8ed30962240f12
  • php-common-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:9a0c7407610abc0725fd71e1ad06eb409853158f85de177a1bfbe6eafa377ed2
  • php-dba-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:e3e60faf70d872a2d339fcc5cc0cb133d40481c58359135cb1349cd59abfdc8d
  • php-dbg-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:94b1ba16c1e89984c61d2544bf2db50484d9372ae8478fa32e12925ebecaa440
  • php-devel-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:787a764528249e31f3f2ff24911e16f8e230e755cd6d38ae6bfb6f29337516cc
  • php-embedded-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:a87196cd98514bd07dce5108952b3f85b4d6c8f40eec1dfdde39e96de7276729
  • php-enchant-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:4833aceb952f38d16e1a6d230e2971f186290588e110ba4c2cc74f56545e5009
  • php-fpm-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:592dc9f5f33d6430d42c0d7a0e38871550404e6f26eeafe034f879b51901b8d5
  • php-gd-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:4bb7592b21c62870addaf32f1898268a3747ac0ddd44c7413a600e69e38d2fcb
  • php-gmp-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:7b438426f694b7c06fe7de40a2966d2fba892ad66fad2718f1f95fef16587f2a
  • php-intl-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:ab63119186572233e0d133707763a88f79bf6d251f867b30b645f4b2ae129100
  • php-json-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:9a1181273dbf8c48b708d1100c43adf0cd2bd82ead10889775bedfa46e21f02c
  • php-ldap-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:827ce078a2f4a570f1b4a315a8bd5ed14aab8d89622cfca7cde93ef80d7edb33
  • php-mbstring-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:041c5dabec220055c1e1eea5fe4760a67464aafa8b75af7333f5a5b172c9fe1b
  • php-mysqlnd-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:efa2e5bb18eefb1bcfd6b42f727795790752d78d692b3d4703b932cbb8b4ca8e
  • php-odbc-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:7ecee878f3d8db37cbef0564f277e6ed45e5693b85dc0af6f62fb4686a0c039b
  • php-opcache-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:43a5f5b635d88be7e94ee2da986ef99716a3b15de694578132069bc0acec032b
  • php-pdo-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:61fe77284fe71896c96633d9eb93617c2a4eaf5422dcdfa921b4ef127baeffa0
  • php-pgsql-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:194a76594a7b1e8045a531e00edf5264887903481505ad6e913a4f949afe4017
  • php-process-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:0900de98d28c650a9448022895004e2088a3fc4411224c15be638204eec92bda
  • php-recode-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:ff668399e033512dc58282ca0558bb13b50add1fa7016fb986308a04777d5e02
  • php-snmp-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:fbcf13a2cf6dc7c35660249d6156f8a8df6ee82913ff01cbd577516f5ff0d464
  • php-soap-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:e0fda07d6222b33ca54e55f913d891f6811034d104c85267c8e7d1683dade05a
  • php-xml-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:3130ff4de008a33ef40929d7574521aed4152c855172706e4243df3b21d601e2
  • php-xmlrpc-7.2.24-1.module_el8+2458+3be31256.tuxcare.els26.x86_64.rpm
    sha:a731926cd5e030c1eb91d4f2803d39efdcaac195d455948adc629dae8c49bee1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.