UBUNTU 16.04 ELS: php7.0 package released - TuxCare

Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Go straight to an AI summary of this blog post instead

  • Summarize this post with Perplexity
  • Summarize this post with Gemini

A new updated php7.0 package within Ubuntu 16.04 ELS is now available for download from our production repository.

CHANGELOG

php7.0-7.0.33-0ubuntu0.16.04.17

  • Fix access-after-free for actual_alias pointer (CVE-2020-7068)
  • Fix logic error due to invalid input validation (CVE-2020-7071)
  • Fix program crash due to null pointer dereference (CVE-2021-21702)
  • Fix integer overflow and subsequent incorrect buffer allocation (CVE-2021-21704)
  • Fix logic error due to incorrect input validation (CVE-2021-21705)
  • Fix priv escalation due to shared memory between worker processes (CVE-2021-21703)

UPDATE COMMAND

apt-get update
apt-get --only-upgrade install php7.0*

 

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.

Table of Contents
Get the open-source security answers you need
Ask Us a Question

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.