{"id":"CLSA-2026-1786449396","summary":"Fix CVE(s): CVE-2026-7260","details":"   * SECURITY UPDATE: uncontrolled recursion (stack-overflow DoS) in\n     phar_get_link_source() on circular symlink chains in tar/phar archives\n     - debian/patches/CVE-2026-7260.patch: replace the recursive\n       phar_get_link_source() with Floyd cycle detection in ext/phar/util.c,\n       and restore the phar path separator in phar_get_link_location() so the\n       symlink walk stays idempotent\n     - CVE-2026-7260","modified":"2026-10-26T09:30:09.193481061Z","published":"2026-08-11T11:56:49Z","upstream":["CVE-2026-7260"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1786449396.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7260"}],"affected":[{"package":{"name":"libapache2-mod-php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"libphp7.4-embed","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libphp7.4-embed?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-bcmath","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bcmath?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-bz2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bz2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-cgi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cgi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-cli","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cli?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-curl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-curl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-dba","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dba?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-enchant","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-enchant?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-fpm","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-fpm?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-gd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-gmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-imap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-imap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-interbase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-interbase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-intl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-intl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-json","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-json?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-mbstring","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mbstring?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-odbc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-odbc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-opcache","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-opcache?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-phpdbg","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-phpdbg?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-pspell","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pspell?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-readline","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-readline?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-snmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-snmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-soap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-soap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-sqlite3","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sqlite3?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-sybase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sybase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-tidy","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-tidy?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-xml","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xml?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-xmlrpc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xmlrpc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-xsl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xsl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}},{"package":{"name":"php7.4-zip","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-zip?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"}}],"schema_version":"1.9.0"}