[CLSA-2026:1786449396] Fix CVE(s): CVE-2026-7260
Type:
security
Severity:
Important
Release date:
2026-08-11 11:56:49 UTC
Description:
* SECURITY UPDATE: uncontrolled recursion (stack-overflow DoS) in phar_get_link_source() on circular symlink chains in tar/phar archives - debian/patches/CVE-2026-7260.patch: replace the recursive phar_get_link_source() with Floyd cycle detection in ext/phar/util.c, and restore the phar path separator in phar_get_link_location() so the symlink walk stays idempotent - CVE-2026-7260
CVEs fixed:
Updated packages:
  • libapache2-mod-php7.4_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:1b9ea0f02f043b780ed4bf10a41a1fb032e07742
  • libphp7.4-embed_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:17b3ebcf5c440387d8b98b5e73bc768e0abc8d08
  • php7.4_7.4.3-4ubuntu2.29+tuxcare.els7_all.deb
    sha:a5412f651b2f212e0e3474d33c59f88a37889104
  • php7.4-bcmath_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:1703b7214c5943be45f68e18269f2ee6aa428712
  • php7.4-bz2_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:b09e3d6873f65400833d91171cd9093c0c4a3560
  • php7.4-cgi_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:c6884af1576099fe8f464d31dc0c668e0d5fc8f5
  • php7.4-cli_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:81dc9d052e5da1d5d1daa5f0e0ae7d2a5879ae83
  • php7.4-common_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:cf5b542a4246cc880834a1b83b438b62e623bdc1
  • php7.4-curl_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:b64868aaf00f58db1ebdb577a3aec11e79ba471b
  • php7.4-dba_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:38ba8d9e4a370f287b6f01f29bf4da875cfd5b75
  • php7.4-dev_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:61c89ce438ab5c550de2e0ffcf7d52ae7b238ffa
  • php7.4-enchant_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:80796ea0a6ccc61af1164caf81762194b3e64f99
  • php7.4-fpm_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:92116418b674f7a2dbe4c312453f4fa4e9f4476c
  • php7.4-gd_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:765820b1d91fe1a5721d90318d9eadbf8233c328
  • php7.4-gmp_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:1bd99a0dcf27b56de2cd01111ff46e0c18c4a8f3
  • php7.4-imap_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:5de0dabe2b6c51e3cef3fb8881c45722793572e8
  • php7.4-interbase_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:9bbe5de350e1ef9410abfd388762646ee7e331ba
  • php7.4-intl_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:b469351c62932fda2f91d2b5c143e8b16e4bd8cc
  • php7.4-json_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:5db5a37c86fe0aa2ccbade4308cd0f4161232f6f
  • php7.4-ldap_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:e3e678f0a383a82fe7a54028512f54a81e47608e
  • php7.4-mbstring_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:0ca3abfea5819aed0a102236b0226914fcd7b6b5
  • php7.4-mysql_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:6412f9b08f4d3a57437c2b5e74c050d83356c852
  • php7.4-odbc_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:1550cc4e52d65e204a057a2b3892f96a8f6e7a36
  • php7.4-opcache_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:938f12beb6d5cb2e0e7dbdc77f4e8d90d2f01162
  • php7.4-pgsql_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:0b4e0f18cf7e01c9899c1c75b656524c8ad9d098
  • php7.4-phpdbg_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:90c284d9ad1bb0ce4b33648793377d0794ebb070
  • php7.4-pspell_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:cb56a53d465da0e24ab6ef877945bb7275190d19
  • php7.4-readline_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:16db7b18f8c23aa9473bb58b5b540e8b66fd84c3
  • php7.4-snmp_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:a02d32873352494cec0690d35c775c94f03c4feb
  • php7.4-soap_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:97d545b8849c8b3d17d832f3e03d37a6a5544693
  • php7.4-sqlite3_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:1014fc8f47c21718e2c53584723feb8815683e76
  • php7.4-sybase_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:3508516e735153c238e0571776f4f0f6d87f01c6
  • php7.4-tidy_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:a43689b046a9d7861aae1848de8fd01f8e8e625c
  • php7.4-xml_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:f84734816c3708ce8f6ad41c92ba2521085eda03
  • php7.4-xmlrpc_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:e03eb22ddcd7ad0025d211b691ec88b1903ec346
  • php7.4-xsl_7.4.3-4ubuntu2.29+tuxcare.els7_all.deb
    sha:514e33b78886f716d2738a8bbe431395e4cbdb1b
  • php7.4-zip_7.4.3-4ubuntu2.29+tuxcare.els7_amd64.deb
    sha:78cf04bc2494328fff6dd4ce7820078c779b3762
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.