Release date:
2026-08-13 04:38:10 UTC
Description:
- CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped
values escaped by PQescapeStringConn() in an E'...' escape-string constant,
but that escaper leaves backslashes untouched when
standard_conforming_strings is on, so a trailing backslash escaped the
doubling quote and broke out of the literal. Drop the E prefix so the plain
'...' form matches what the escaper produces.
- CVE-2026-7260: phar circular symlink crash. phar_get_link_source() followed
symlink chains by tail recursion with no cycle or depth guard, so a tar phar
holding circular links exhausted the C stack. Walk the chain iteratively with
Floyd cycle detection and return NULL on a loop; also restore the '/'
separator in phar_get_link_location() so the walk stays idempotent.
Updated packages:
-
alt-php81-8.1.34-27.el6.x86_64.rpm
sha:b13125389779d1919526cf95b9ddf9c7bbb7dbe0cb81f9e84352eb50ff9577d0
-
alt-php81-bcmath-8.1.34-27.el6.x86_64.rpm
sha:9324622fad2b8c982b111f2b47f50b67530ba4b2139ec5e9fd420f7144c772b4
-
alt-php81-cli-8.1.34-27.el6.x86_64.rpm
sha:fae64d7199ef83335acc2bb99c786c34b108001830a4ad1d79a8a49a05b51cb8
-
alt-php81-common-8.1.34-27.el6.x86_64.rpm
sha:97ccb6ab41c8e1b43ab9f7d0e10928230db36b06c6bb01f311e591fac6d923f3
-
alt-php81-dba-8.1.34-27.el6.x86_64.rpm
sha:c73a97ef721930ac71086fcbde91fc7e7550f289c569009827bf25f76845b725
-
alt-php81-devel-8.1.34-27.el6.x86_64.rpm
sha:ef6292e186dc444998fc9427a6eff937eea9c46eb091d7af1ca114a14f3e4f01
-
alt-php81-enchant-8.1.34-27.el6.x86_64.rpm
sha:b90adeac86a397c8e9d90276033ef4050dfdc0b957007a46cb4d2cb5bec83be1
-
alt-php81-firebird-8.1.34-27.el6.x86_64.rpm
sha:75b287175465c741d3be3627cfc352a02737f5fdd6b94155f3414b3909853324
-
alt-php81-gd-8.1.34-27.el6.x86_64.rpm
sha:9551e536d9bdf55a8bef9ed0109f0f6076998d6e9e5b57955364fb981fe08712
-
alt-php81-gmp-8.1.34-27.el6.x86_64.rpm
sha:75f4edf213605b63454678ea4d8e5984a5fa7825e247b544c3fe65591f74686b
-
alt-php81-imap-8.1.34-27.el6.x86_64.rpm
sha:43da098f8ff82e8721dd25915760bc0fbf2b52691678997455665d97708e1f69
-
alt-php81-intl-8.1.34-27.el6.x86_64.rpm
sha:6e0dc151543558483ba850523a84976e48e0f2266e17d7acf3f89cb833458993
-
alt-php81-ldap-8.1.34-27.el6.x86_64.rpm
sha:53c4bbd0acab828b1c21cf0ec12ee1a7990de4f3741f4c5b9705c7149def5585
-
alt-php81-mbstring-8.1.34-27.el6.x86_64.rpm
sha:3f2d9a715e4c2bc48aacf503b8f27e4b6ce9f61e471923a9d59ca5edd29f065c
-
alt-php81-mysqlnd-8.1.34-27.el6.x86_64.rpm
sha:bb119bba653be8633a83869c8523cb21ff3fc0156c51bfc9fd4315a9da57d4b8
-
alt-php81-odbc-8.1.34-27.el6.x86_64.rpm
sha:a5d1aee7bfbde20729fed2031eb63be7911c03f00442d7febfa19cf7127999d5
-
alt-php81-opcache-8.1.34-27.el6.x86_64.rpm
sha:e415f91b3c1f8152d82200c7917e6d9423776d30ada7bb18efc748b1e8625a65
-
alt-php81-pdo-8.1.34-27.el6.x86_64.rpm
sha:3aa1fcc7966534fa9f5a11413828cc3d6dae7a4490e8d036051017a82e366870
-
alt-php81-pgsql-8.1.34-27.el6.x86_64.rpm
sha:6f1edabf83725e763322ebca539759768b85885fa7f716b314cb3695511fd463
-
alt-php81-php-fpm-8.1.34-27.el6.x86_64.rpm
sha:2e30a3fc7d08302e494f900a0ead2edb432cadfbbbf0a9313c19a8925117e1d9
-
alt-php81-process-8.1.34-27.el6.x86_64.rpm
sha:b4fadafd5fdc70bd7ba19a57a742653aca080df4729f61b2a00fac397c50ca18
-
alt-php81-pspell-8.1.34-27.el6.x86_64.rpm
sha:ad226847306a8650b6931e083091759f8c167bda02ede176fc7e70cb479b4f3a
-
alt-php81-snmp-8.1.34-27.el6.x86_64.rpm
sha:3f906f1449ec6c63bd6ab820c299371932cf5fb112e932ecd173d29581818883
-
alt-php81-soap-8.1.34-27.el6.x86_64.rpm
sha:b5d33b2b5fd46eceff29bc6b9f0d65b54e3492a222ed6fd3fa7f5249e5e6c80e
-
alt-php81-sodium-8.1.34-27.el6.x86_64.rpm
sha:4f988c52b33209fbbd93e4499f3c2d67654519f64be0f743df6766771f1ae7f2
-
alt-php81-tidy-8.1.34-27.el6.x86_64.rpm
sha:2c58cd11a37afed6eec63f0eba731eb1180674988df57dc2d83dca483e378298
-
alt-php81-xml-8.1.34-27.el6.x86_64.rpm
sha:f2d83d53308942b28250351985ceac6b049e9f35d905f3a81db8a308b78d104c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
