CLSA-2026-1786449396

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786449396
Upstream
  • CVE-2026-7260
Published
2026-08-11T11:56:49Z
Modified
2026-10-26T09:30:09Z
Summary
Fix CVE(s): CVE-2026-7260
Details
  • SECURITY UPDATE: uncontrolled recursion (stack-overflow DoS) in phar_get_link_source() on circular symlink chains in tar/phar archives
    • debian/patches/CVE-2026-7260.patch: replace the recursive phar_get_link_source() with Floyd cycle detection in ext/phar/util.c, and restore the phar path separator in phar_get_link_location() so the symlink walk stays idempotent
    • CVE-2026-7260
References

Affected packages

TuxCare:Ubuntu:20.04
libapache2-mod-php7.4

Package

Name
libapache2-mod-php7.4
Purl
pkg:deb/tuxcare/libapache2-mod-php7.4?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
libphp7.4-embed

Package

Name
libphp7.4-embed
Purl
pkg:deb/tuxcare/libphp7.4-embed?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4

Package

Name
php7.4
Purl
pkg:deb/tuxcare/php7.4?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-bcmath

Package

Name
php7.4-bcmath
Purl
pkg:deb/tuxcare/php7.4-bcmath?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-bz2

Package

Name
php7.4-bz2
Purl
pkg:deb/tuxcare/php7.4-bz2?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-cgi

Package

Name
php7.4-cgi
Purl
pkg:deb/tuxcare/php7.4-cgi?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-cli

Package

Name
php7.4-cli
Purl
pkg:deb/tuxcare/php7.4-cli?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-common

Package

Name
php7.4-common
Purl
pkg:deb/tuxcare/php7.4-common?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-curl

Package

Name
php7.4-curl
Purl
pkg:deb/tuxcare/php7.4-curl?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-dba

Package

Name
php7.4-dba
Purl
pkg:deb/tuxcare/php7.4-dba?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-dev

Package

Name
php7.4-dev
Purl
pkg:deb/tuxcare/php7.4-dev?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-enchant

Package

Name
php7.4-enchant
Purl
pkg:deb/tuxcare/php7.4-enchant?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-fpm

Package

Name
php7.4-fpm
Purl
pkg:deb/tuxcare/php7.4-fpm?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-gd

Package

Name
php7.4-gd
Purl
pkg:deb/tuxcare/php7.4-gd?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-gmp

Package

Name
php7.4-gmp
Purl
pkg:deb/tuxcare/php7.4-gmp?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-imap

Package

Name
php7.4-imap
Purl
pkg:deb/tuxcare/php7.4-imap?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-interbase

Package

Name
php7.4-interbase
Purl
pkg:deb/tuxcare/php7.4-interbase?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-intl

Package

Name
php7.4-intl
Purl
pkg:deb/tuxcare/php7.4-intl?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-json

Package

Name
php7.4-json
Purl
pkg:deb/tuxcare/php7.4-json?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-ldap

Package

Name
php7.4-ldap
Purl
pkg:deb/tuxcare/php7.4-ldap?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-mbstring

Package

Name
php7.4-mbstring
Purl
pkg:deb/tuxcare/php7.4-mbstring?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-mysql

Package

Name
php7.4-mysql
Purl
pkg:deb/tuxcare/php7.4-mysql?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-odbc

Package

Name
php7.4-odbc
Purl
pkg:deb/tuxcare/php7.4-odbc?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-opcache

Package

Name
php7.4-opcache
Purl
pkg:deb/tuxcare/php7.4-opcache?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-pgsql

Package

Name
php7.4-pgsql
Purl
pkg:deb/tuxcare/php7.4-pgsql?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-phpdbg

Package

Name
php7.4-phpdbg
Purl
pkg:deb/tuxcare/php7.4-phpdbg?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-pspell

Package

Name
php7.4-pspell
Purl
pkg:deb/tuxcare/php7.4-pspell?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-readline

Package

Name
php7.4-readline
Purl
pkg:deb/tuxcare/php7.4-readline?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-snmp

Package

Name
php7.4-snmp
Purl
pkg:deb/tuxcare/php7.4-snmp?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-soap

Package

Name
php7.4-soap
Purl
pkg:deb/tuxcare/php7.4-soap?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-sqlite3

Package

Name
php7.4-sqlite3
Purl
pkg:deb/tuxcare/php7.4-sqlite3?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-sybase

Package

Name
php7.4-sybase
Purl
pkg:deb/tuxcare/php7.4-sybase?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-tidy

Package

Name
php7.4-tidy
Purl
pkg:deb/tuxcare/php7.4-tidy?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-xml

Package

Name
php7.4-xml
Purl
pkg:deb/tuxcare/php7.4-xml?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-xmlrpc

Package

Name
php7.4-xmlrpc
Purl
pkg:deb/tuxcare/php7.4-xmlrpc?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-xsl

Package

Name
php7.4-xsl
Purl
pkg:deb/tuxcare/php7.4-xsl?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"
php7.4-zip

Package

Name
php7.4-zip
Purl
pkg:deb/tuxcare/php7.4-zip?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.29+tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1786449396.json"