[CLSA-2026:1786589141] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-13 02:45:52 UTC
Description:
* CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-70_amd64.deb
    sha:57c9ce3d0701d8c57c11cb26ae567736ee7f36f6
  • alt-php74-bcmath_7.4.33-70_amd64.deb
    sha:96136e8c78037f68d421a6ec03b8fc8f53385389
  • alt-php74-cli_7.4.33-70_amd64.deb
    sha:3e185c6e47262481565a995d119a450003b30b4b
  • alt-php74-common_7.4.33-70_amd64.deb
    sha:856457ee0c937e03023c869914ddc09d36761601
  • alt-php74-dba_7.4.33-70_amd64.deb
    sha:ad93235ddeaf1f4e89bd9df573a6745b56ffafb4
  • alt-php74-dev_7.4.33-70_amd64.deb
    sha:a637aad2de2df3a38802800cdd8ca4809d2e0ca8
  • alt-php74-enchant_7.4.33-70_amd64.deb
    sha:c2db3178cf348aef606a464afad2888347641fe0
  • alt-php74-firebird_7.4.33-70_amd64.deb
    sha:915f7a26d5d4234ac38e4a36d0d6ad0b0d4a8f7e
  • alt-php74-gd_7.4.33-70_amd64.deb
    sha:f816f41f288aeb036ae3e50fb6835b17217eba72
  • alt-php74-imap_7.4.33-70_amd64.deb
    sha:6a9620d1abba6667122a866216b6c53553795921
  • alt-php74-intl_7.4.33-70_amd64.deb
    sha:40536f3838e9d4096c4903ea026e10b8af36b6ef
  • alt-php74-ldap_7.4.33-70_amd64.deb
    sha:67db1f7e3081b6d2577e6f056ef02c01b0f1d864
  • alt-php74-mbstring_7.4.33-70_amd64.deb
    sha:f441c71dbe423e764bac9b34abc54a55d03e30ef
  • alt-php74-mysqlnd_7.4.33-70_amd64.deb
    sha:5d8b0295f164d238362295ff665ca19deb52ba1f
  • alt-php74-odbc_7.4.33-70_amd64.deb
    sha:5a45deea81265d03cb581a786de9377e529bff7c
  • alt-php74-opcache_7.4.33-70_amd64.deb
    sha:c21a7aa875dc25fa292a0870a5fb069d1119e384
  • alt-php74-pdo_7.4.33-70_amd64.deb
    sha:a19c40119cc2d7cb71e3a5a7200c101c676a2a1e
  • alt-php74-pgsql_7.4.33-70_amd64.deb
    sha:9624da0d492d10bda8e107a6c78e09e7761bfa45
  • alt-php74-php-fpm_7.4.33-70_amd64.deb
    sha:75354f7d649cf333f502bf3a9652413c084a21e8
  • alt-php74-process_7.4.33-70_amd64.deb
    sha:f0ebceab20b657f8a4b9719ad7bc5985c7c8e4d9
  • alt-php74-pspell_7.4.33-70_amd64.deb
    sha:1fff03201e6eea630fd786eab05a9056429ba900
  • alt-php74-snmp_7.4.33-70_amd64.deb
    sha:b06ac3db81164736b44db8283282d3748b468da6
  • alt-php74-soap_7.4.33-70_amd64.deb
    sha:cdf44ef59e33213a96a93cd6d40119e16383bdea
  • alt-php74-sodium_7.4.33-70_amd64.deb
    sha:d91bba3ecfb8adbd67ed84f40a247973e155832e
  • alt-php74-tidy_7.4.33-70_amd64.deb
    sha:19769f2abddb2800badcbb26849bb3d2df115d0c
  • alt-php74-xml_7.4.33-70_amd64.deb
    sha:10cb8ba660db2f80eb1dc9557ac18867f5382dd4
  • alt-php74-xmlrpc_7.4.33-70_amd64.deb
    sha:0137f98580e3e48bb2f99a5f8a4f5d1b565c357f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.