Back Linuxsecurity

openSUSE php7 Moderate Stack Overflow Fix CVE-2026-7260 SUSE-SU-2026-4128

Linuxsecurity •LinuxSecurity Advisories • September 11, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

This update for php7 fixes the following issue:

* CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).

* Allow removal of apache2-mod_php7 even if the php7 module is not enabled

(bsc#1205782, bsc#1276531).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server for SAP Applications 15 SP4

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4128=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4128=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4128=1

zypper in -t patch SUSE-2026-4128=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4128=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4128=1

* SUSE Linux Enterprise Server 15 SP4 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4128=1

* Legacy Module 15-SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)

* php7-soap-7.4.33-150400.4.73.1

* php7-pcntl-7.4.33-150400.4.73.1

* php7-pdo-7.4.33-150400.4.73.1

* php7-7.4.33-150400.4.73.1

* php7-odbc-debuginfo-7.4.33-150400.4.73.1

* php7-dom-7.4.33-150400.4.73.1

* php7-intl-7.4.33-150400.4.73.1

* php7-cli-debuginfo-7.4.33-150400.4.73.1

* php7-ldap-7.4.33-150400.4.73.1

* php7-bz2-debuginfo-7.4.33-150400.4.73.1

* php7-soap-debuginfo-7.4.33-150400.4.73.1

* php7-mysql-7.4.33-150400.4.73.1

* php7-sockets-7.4.33-150400.4.73.1

* php7-sysvsem-debuginfo-7.4.33-150400.4.73.1

* php7-xmlreader-debuginfo-7.4.33-150400.4.73.1

* php7-shmop-7.4.33-150400.4.73.1

* php7-snmp-debuginfo-7.4.33-150400.4.73.1

* php7-json-7.4.33-150400.4.73.1

* php7-sysvmsg-debuginfo-7.4.33-150400.4.73.1

* php7-dba-7.4.33-150400.4.73.1

* php7-calendar-7.4.33-150400.4.73.1

* apache2-mod_php7-debugsource-7.4.33-150400.4.73.1

* php7-fastcgi-debugsource-7.4.33-150400.4.73.1

* php7-ftp-debuginfo-7.4.33-150400.4.73.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Moderate Stack Overflow Vulnerability in php7 Affects SUSE and openSUSE A moderate stack overflow vulnerability, identified as CVE-2026-7260, has been reported in php7, specifically affecting systems with circular symlinks in phar files. This vulnerability allows for potential exploitation, impacting SUSE Linux Enterprise Server and openSUSE users. The vulnerability has a CVSS score of 4.0, indicating a moderate severity level. Users are advised to apply patches immediately to mitigate risks. The vulnerability was published on July 30, 2026, and has been addressed in updates released on September 11, 2026. Additional changes in the patch allow for the removal of apache2-mod_php7 even if the module is not enabled. Administrators are encouraged to follow SUSE's recommended installation methods for applying the updates. The updates are available for various SUSE products including SAP Applications and High Performance Computing versions. 2 sources 46

Extracted Entities

CVEs (1)

CVE-2026-7260

CWE Weaknesses (1)

CWE-120 - Classic Buffer Overflow