USN-8734-1: Lỗ hổng PHP

Tóm tắt

Bản tin bảo mật USN-8734-1 của Ubuntu công bố các lỗ hổng trong PHP. Bản tin đề cập bốn CVE và các phiên bản gói PHP 7.0 đã sửa cho Ubuntu 16.04 LTS. Quyền truy cập các bản cập nhật này yêu cầu Ubuntu Pro/ESM.

Dữ liệu chi tiết

{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8734-1",
"version": null,
"announcementDate": "2026-09-07 13:56:38+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8734-1",
"cves": [
"CVE-2026-17543",
"CVE-2026-7260",
"CVE-2026-7262",
"CVE-2026-7568"
],
"fixedPackages": [
{
"release": "16.04 LTS xenial",
"package": "libapache2-mod-php7.0",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "libphp7.0-embed",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-cgi",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-cli",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-common",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-fpm",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-pgsql",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-phpdbg",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-soap",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
}
],
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
}