概述
Ubuntu 发布安全公告 USN-8734-1，修复 PHP 中的四个漏洞。公告由 Ubuntu Security Notices 发布，发布时间为 2026-09-07 13:56:38+00。
公告原文：https://ubuntu.com/security/notices/USN-8734-1
影响范围与获取方式
公告面向 Ubuntu 16.04 LTS 上的 PHP 7.0 软件包。公告注明，获取相关修复需要 Ubuntu Pro/ESM。
公告数据
公告以结构化数据形式发布，以下按原文顺序列出：
{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8734-1",
"version": null,
"announcementDate": "2026-09-07 13:56:38+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8734-1",
"cves": [
"CVE-2026-17543",
"CVE-2026-7260",
"CVE-2026-7262",
"CVE-2026-7568"
],
"fixedPackages": [
{
"release": "16.04 LTS xenial",
"package": "libapache2-mod-php7.0",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "libphp7.0-embed",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-cgi",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-cli",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-common",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-fpm",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-pgsql",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-phpdbg",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "16.04 LTS xenial",
"package": "php7.0-soap",
"version": "7.0.33-0ubuntu0.16.04.16+esm20",
"access": "Ubuntu Pro / ESM (see official notice)"
}
],
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
}
