Release date:
2026-08-13 04:30:11 UTC
Description:
- CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped
values escaped by PQescapeStringConn() in an E'...' escape-string constant,
but that escaper leaves backslashes untouched when
standard_conforming_strings is on, so a trailing backslash escaped the
doubling quote and broke out of the literal. Drop the E prefix so the plain
'...' form matches what the escaper produces.
- CVE-2026-7260: phar circular symlink crash. phar_get_link_source() followed
symlink chains by tail recursion with no cycle or depth guard, so a tar phar
holding circular links exhausted the C stack. Walk the chain iteratively with
Floyd cycle detection and return NULL on a loop; also restore the '/'
separator in phar_get_link_location() so the walk stays idempotent.
Updated packages:
-
alt-php81-8.1.34-27.el10.x86_64.rpm
sha:678a4940a337663f1bf8361fd144f2db66caf96b632d623ecf2038a664e792af
-
alt-php81-bcmath-8.1.34-27.el10.x86_64.rpm
sha:fec7b52b69b3e5601c244fb3e69b3dd87daeddf24cf131c09512920885119eb0
-
alt-php81-cli-8.1.34-27.el10.x86_64.rpm
sha:cdbb12849dafae658c1b693284861c94b73cb0c079101aedf8cbe5ce3ad62a56
-
alt-php81-common-8.1.34-27.el10.x86_64.rpm
sha:e0d41f00c1023c7cb2aff1090c9fe1e6e9e0cb804e3295385bc41ce4fc497ce7
-
alt-php81-dba-8.1.34-27.el10.x86_64.rpm
sha:3692d481819c89e21d5fae96a32f7560b1324ee723958946f9eafa6e7b7456fc
-
alt-php81-devel-8.1.34-27.el10.x86_64.rpm
sha:514666af1a29b146c813c28cf410c74f96ab8e9e5637c4fa9a7c7d3bf2c1933c
-
alt-php81-enchant-8.1.34-27.el10.x86_64.rpm
sha:8e23a2fb6378e543b371162e788924441ba47575b33bd9150e3a04360c30224d
-
alt-php81-firebird-8.1.34-27.el10.x86_64.rpm
sha:4da74a4519ec959c3b916b51ce62d9dd1bd3213e194ce7916b27dc2a126d8c13
-
alt-php81-gd-8.1.34-27.el10.x86_64.rpm
sha:893d04fd5b0ec42c07c2222b6507e3b9d972e301cf301344c7b675942cc56fe0
-
alt-php81-gmp-8.1.34-27.el10.x86_64.rpm
sha:14f6623cbd05b9ea6ec3557a1a25f4eda0c665c15e1ec8cd8875ac7e4dfbf5d8
-
alt-php81-imap-8.1.34-27.el10.x86_64.rpm
sha:7e6c4a33f6c3c4d3d4f17acbe923b018da34a2e098d05eb7b4236eee9aa38448
-
alt-php81-intl-8.1.34-27.el10.x86_64.rpm
sha:43a8adb1b25958cc2ecd74eec660b84184ff8a36a56a8f4b496b9c14c5a03a01
-
alt-php81-ldap-8.1.34-27.el10.x86_64.rpm
sha:60fc62ac9515e574969ac289e9ad17848b4fbd100cda688ed21e6e9d727daabb
-
alt-php81-mbstring-8.1.34-27.el10.x86_64.rpm
sha:10c419ad13a44a90c7dec0c70ffa53c5382bc28f0114f5f64ab3fc807036c9df
-
alt-php81-mysqlnd-8.1.34-27.el10.x86_64.rpm
sha:da2981215f73a0365d5415843696f7bec70d8bbf4e44c5a1f1cb1e8b729b81f0
-
alt-php81-odbc-8.1.34-27.el10.x86_64.rpm
sha:e9d0f0f1f6b62054cbfd47166251c2c5d3606b8f3b78f2501915ecde511c385c
-
alt-php81-opcache-8.1.34-27.el10.x86_64.rpm
sha:e15a740ed77c199a334842d71769c46dd30c86a7e8ac6d498e3b37a4d018d103
-
alt-php81-pdo-8.1.34-27.el10.x86_64.rpm
sha:5df0e6aecc525bf3e22acd2e17213e658d72e9a349b2eb704809808332d24ab6
-
alt-php81-pgsql-8.1.34-27.el10.x86_64.rpm
sha:675faf1cdb6fecd0d3560ddb7be1788d293facaeed373674722fcd1be96bf563
-
alt-php81-php-fpm-8.1.34-27.el10.x86_64.rpm
sha:34b0ed2f534f644033baa2f87af18d181785869b3c9907b91d31435cf3d30bf1
-
alt-php81-process-8.1.34-27.el10.x86_64.rpm
sha:b631abe566f02360d7a63906f14b54d05cd470c38c429871f536d768de6e2d65
-
alt-php81-pspell-8.1.34-27.el10.x86_64.rpm
sha:c7c3350a2b6c0c7b38f42b5c13beb4ced5895c40b8a48b92a869042de57709b1
-
alt-php81-snmp-8.1.34-27.el10.x86_64.rpm
sha:79eda83fa5177518413d106c735a5613f74c8e27b6d0808563583fa5713cb1e1
-
alt-php81-soap-8.1.34-27.el10.x86_64.rpm
sha:e285aac20912e4fec25bacfd8ff875dbf6697741d2871c96f97e801376bde659
-
alt-php81-sodium-8.1.34-27.el10.x86_64.rpm
sha:69bc00f925e1e97b89685ad35c8507d374df4420697659739f6ae76601d94d5f
-
alt-php81-tidy-8.1.34-27.el10.x86_64.rpm
sha:85490b3501c82bc41bade8f57792eed40a687c9e5d126809aa6f73b284fa4d0c
-
alt-php81-xml-8.1.34-27.el10.x86_64.rpm
sha:2199170b7829986feeceb0ab6f4a3c3a7200fa1e83689743487eff028d2b9b63
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
