[CLSA-2026:1786033722] Fix CVE(s): CVE-2026-7260
Type:
security
Severity:
Important
Release date:
2026-08-06 16:28:54 UTC
Description:
* SECURITY UPDATE: fix unbounded recursion on circular symlinks in phar archives (GHSA-vc5h-9ppw-p5f3) - debian/patches/CVE-2026-7260.patch: restore the path separator in phar_get_link_location() so the Floyd cycle walk stays idempotent in ext/phar/util.c - CVE-2026-7260
CVEs fixed:
Updated packages:
  • libapache2-mod-php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:6e4bc2c4da1fa3afa01acc90678a97df5e3e1c78
  • libphp7.0-embed_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:0a18779ecb8f765c41a9297ea164371bd5a8ba38
  • php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_all.deb
    sha:7fcc7ccd9dd9c27e827268ea9e65f2935b1fdda3
  • php7.0-bcmath_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:fad16d52b2f2c7b21c0beac9fc89442ddf6150b7
  • php7.0-bz2_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:33fc28f12648c6964fc9713d26df76e98a7abdb9
  • php7.0-cgi_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:c86de33325c5dd460b100eb476a17b9d0a1a96d8
  • php7.0-cli_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:1a4915c1fc571f40213d4e91df6ee3229f59e4ee
  • php7.0-common_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:6daed6d2a4e167f2312ac1c1633136dedf0674ff
  • php7.0-curl_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:4e7f4222845709e6d78be8714e055a91bf8926d0
  • php7.0-dba_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:6fb759ffbc6aecb3ca8d99596517512ded6d4cf1
  • php7.0-dev_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:934bc9995a9cff03dbe00fed23ff76e2da1a97a1
  • php7.0-enchant_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:384789b2d6d112a8be36634c5db204a5fbba99b7
  • php7.0-fpm_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:b9ff7ac97dfa79f5027f91db6d6cb5920df835a4
  • php7.0-gd_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:74ade8ad04e62d5d0e03fdfdbf29c1b7138a05ef
  • php7.0-gmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:a2c0a5d9ded5d863bac21ea767b5af2922a35c01
  • php7.0-imap_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:857af060d7e5c69057cbf693dea8c1a86ed5708e
  • php7.0-interbase_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:221e838d8ad2bea6774d7515e2f68c306fa3c60e
  • php7.0-intl_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:8ab5b270bb127d1800f8399c6a95c8ab1aceefaa
  • php7.0-json_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:36de08ab7c317c996b1f7eccea4538c1922066e7
  • php7.0-ldap_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:dd3ca0cfb3b8c2f83985cc21fbd7651d97c4ee8b
  • php7.0-mbstring_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:23befa7203f4f5ca3fa59430a04be8202df21565
  • php7.0-mcrypt_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:753ddd707231385d834c9f30bc0493218c27036a
  • php7.0-mysql_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:aba3a32405dfd8b6ffa724c11b122c617aa8df4c
  • php7.0-odbc_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:389f7a96f4a1cab851e526b3604538a0115f44d0
  • php7.0-opcache_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:41b42da7962f1ee2fd35e3bc08120e3ba5e536fc
  • php7.0-pgsql_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:192b7d2efd049a230780998e03a0fbef9ba1a054
  • php7.0-phpdbg_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:1bd5f322ebcfcb869878f13db5a18000eb928166
  • php7.0-pspell_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:76c06bae83cdb9216cabccbc365eeba0c74e214c
  • php7.0-readline_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:e4172425433634fb44870aae5141a7ec4565b0ad
  • php7.0-recode_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:1256b9607618cfc531173eda9e40edd4a54c8c57
  • php7.0-snmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:b33ed01412bac40266b86dc8bf07404c2eeb98d0
  • php7.0-soap_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:9a8b3bb42adf2c8f52419e35f37020509e729fc9
  • php7.0-sqlite3_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:096879f4ce2debb901e3117186d925bacc9fd0ec
  • php7.0-sybase_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:50c46c3cf57a25e6731000f1e4d51676fae36d7d
  • php7.0-tidy_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:9f110b86ccb0ef5f1bd19958d0935975e7bd8688
  • php7.0-xml_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:b6fefb7915480a7ac6e3f609221fb3c5be38bc5f
  • php7.0-xmlrpc_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:ca970f56ec51ca5d15629fe76b9da598e178dbe9
  • php7.0-xsl_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_all.deb
    sha:41ddc629cb6887d56fce029911f3e888b38f5faa
  • php7.0-zip_7.0.33-0ubuntu0.16.04.17+tuxcare.els24_amd64.deb
    sha:7d9247f28f16c554c703cc97602c6daf268b6ebe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.