[CLSA-2026:1786445994] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-11 11:00:06 UTC
Description:
* CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-70_amd64.deb
    sha:91a3e998e6e34637e068e7d9369f7e3b0dcba21b
  • alt-php74-bcmath_7.4.33-70_amd64.deb
    sha:bdb9db43dd9cff0b8d6443c945b49d5c69501045
  • alt-php74-cli_7.4.33-70_amd64.deb
    sha:458acc584f4de0b40f00ff412d5dcc4aa09990de
  • alt-php74-common_7.4.33-70_amd64.deb
    sha:5b1f6a7b33e8b9e836e3c258fbc051696eedb372
  • alt-php74-dba_7.4.33-70_amd64.deb
    sha:ecd9fd470ad7d37d95976d8924bdbb9e5479d96a
  • alt-php74-dev_7.4.33-70_amd64.deb
    sha:7d5fec7da13fed69bbb22603f20f5d9984895dae
  • alt-php74-enchant_7.4.33-70_amd64.deb
    sha:a372554faf448eac37c8ef04e5f9da667cda5e5b
  • alt-php74-firebird_7.4.33-70_amd64.deb
    sha:f87c2edd8da12ca25800e53d4e4230c0e7f4bb3b
  • alt-php74-gd_7.4.33-70_amd64.deb
    sha:c0f43fad9fc7251ab9403cc5cc0695dd30e69f5b
  • alt-php74-imap_7.4.33-70_amd64.deb
    sha:0040203a65afb9752eb322b347a3552190d014bf
  • alt-php74-intl_7.4.33-70_amd64.deb
    sha:fdef20ffe3e413d28e77df0a72344c7f531f3f9d
  • alt-php74-ldap_7.4.33-70_amd64.deb
    sha:e3a66d8bddee52fae4602a86ddda52e6902efe89
  • alt-php74-mbstring_7.4.33-70_amd64.deb
    sha:0a631e549014b35f70e7329626636fd8a3832472
  • alt-php74-mysqlnd_7.4.33-70_amd64.deb
    sha:d54d8846fda69832eb27dbb0089e4d84d16387cc
  • alt-php74-odbc_7.4.33-70_amd64.deb
    sha:dd4f8e3e2277d71d7a479a0cae6b39a494d21e5e
  • alt-php74-opcache_7.4.33-70_amd64.deb
    sha:24bedd2a343173e110d126a32e06d3045b1af5eb
  • alt-php74-pdo_7.4.33-70_amd64.deb
    sha:152f3c4bcc54792f4c455f34dda7cf383e2943bb
  • alt-php74-pgsql_7.4.33-70_amd64.deb
    sha:5606b937ea219d0772e706df51d7d6cc6ee65129
  • alt-php74-php-fpm_7.4.33-70_amd64.deb
    sha:c5bb7b9438aaa0d8d7f77a641805375b65c55e56
  • alt-php74-process_7.4.33-70_amd64.deb
    sha:a5dec2bfdb87454c713979d5144df4a6b0645776
  • alt-php74-pspell_7.4.33-70_amd64.deb
    sha:0baa71df08bcdcad6e30fcfc2e9d28a5542a33a8
  • alt-php74-snmp_7.4.33-70_amd64.deb
    sha:a35b12132332fb1e55e59f00b6e2e64bc9d81408
  • alt-php74-soap_7.4.33-70_amd64.deb
    sha:e9ee631a96c32fbc055c29b0ce4462d9b744f62f
  • alt-php74-sodium_7.4.33-70_amd64.deb
    sha:7768e8b1c2af80114d8a673d9a98a0c3a2c8579f
  • alt-php74-tidy_7.4.33-70_amd64.deb
    sha:b0c0a75cca293f61d1999b8ae10ade0fc565107b
  • alt-php74-xml_7.4.33-70_amd64.deb
    sha:afd7cb89c829f8644e6efbb3165be7bb1d95e0bf
  • alt-php74-xmlrpc_7.4.33-70_amd64.deb
    sha:5254e352401701ed3d5118c80f2d5ec3feeafbf0
  • alt-php74_7.4.33-70_arm64.deb
    sha:282af1e9e99a621802cd7a2d05c97e7f5c666195
  • alt-php74-bcmath_7.4.33-70_arm64.deb
    sha:0a57757de7608d7ec1d673c9eb0ce3b44d9814e2
  • alt-php74-cli_7.4.33-70_arm64.deb
    sha:010ef0c8edd7f0e6cff54cee5d05c21b6fcaa433
  • alt-php74-common_7.4.33-70_arm64.deb
    sha:ac5c70f26af643980a68b695b91daa9aaadd5c82
  • alt-php74-dba_7.4.33-70_arm64.deb
    sha:b589bd801a5dfe906e7dae035dbd903dd3c60d97
  • alt-php74-dev_7.4.33-70_arm64.deb
    sha:89b5a86588cab7d55cc3edf99c660cd24fe7e2af
  • alt-php74-enchant_7.4.33-70_arm64.deb
    sha:3c8168ae83a06f04a430819fe9f4dfa8941051f1
  • alt-php74-firebird_7.4.33-70_arm64.deb
    sha:3cf8a4d891a1abc06f9b3a8d531d83c101c0ac42
  • alt-php74-gd_7.4.33-70_arm64.deb
    sha:b83022d9e4c8a9b9ad54c58e449eb45ea15111b5
  • alt-php74-imap_7.4.33-70_arm64.deb
    sha:c7f21ddfa271b54f80f9499ee2946df46fb5fea8
  • alt-php74-intl_7.4.33-70_arm64.deb
    sha:2ebbe9e85fd175a630f7afd20a2329ddefb76b9e
  • alt-php74-ldap_7.4.33-70_arm64.deb
    sha:ebd54ce42657c5602d746a9fee1403ce74183825
  • alt-php74-mbstring_7.4.33-70_arm64.deb
    sha:f19f3c1535142285bcbf9946f81f9d296cba082b
  • alt-php74-mysqlnd_7.4.33-70_arm64.deb
    sha:3a605fc672eeb1dbbe4c65e3cdf64c2083cbecf2
  • alt-php74-odbc_7.4.33-70_arm64.deb
    sha:f5cfc450f1067d9d5851ca92826d4d1a67707c6c
  • alt-php74-opcache_7.4.33-70_arm64.deb
    sha:0e2a9f44b999464320397b71f1cd97713b9db4dc
  • alt-php74-pdo_7.4.33-70_arm64.deb
    sha:5d4e5e067c9d2d5961e1c7abf85ab0f10e1a5759
  • alt-php74-pgsql_7.4.33-70_arm64.deb
    sha:cbfa9a46f148f9fdcc0e716ad1934ee0256df19a
  • alt-php74-php-fpm_7.4.33-70_arm64.deb
    sha:93b70636f2c5c2c1392529978d03a4ec4fd6d33c
  • alt-php74-process_7.4.33-70_arm64.deb
    sha:e6528d23687890ed3f2db6658b9baac20d49a82d
  • alt-php74-pspell_7.4.33-70_arm64.deb
    sha:5482f62d023e8fa462869f631bd40fcc9f44370b
  • alt-php74-snmp_7.4.33-70_arm64.deb
    sha:ddbe7a4f237c6ee3945e43318c995af74af21866
  • alt-php74-soap_7.4.33-70_arm64.deb
    sha:16dcc37ace3e5fbc58236a4cddbe810dc6f0ae19
  • alt-php74-sodium_7.4.33-70_arm64.deb
    sha:d58786785a3874379b3521dfc2b09f983f906429
  • alt-php74-tidy_7.4.33-70_arm64.deb
    sha:128dee245dc173ab014fd8b0af3f52a4455466cb
  • alt-php74-xml_7.4.33-70_arm64.deb
    sha:6bafe56c1b46c25b9b905b3cc38d54019f3c4b50
  • alt-php74-xmlrpc_7.4.33-70_arm64.deb
    sha:b62c5deda79af84822147fda00e7919a02eb770f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.