Release date:
2026-08-10 09:25:08 UTC
Description:
- CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped
values escaped by PQescapeStringConn() in an E'...' escape-string constant,
but that escaper leaves backslashes untouched when
standard_conforming_strings is on, so a trailing backslash escaped the
doubling quote and broke out of the literal. Drop the E prefix so the plain
'...' form matches what the escaper produces.
- CVE-2026-7260: phar circular symlink crash. phar_get_link_source() followed
symlink chains by tail recursion with no cycle or depth guard, so a tar phar
holding circular links exhausted the C stack. Walk the chain iteratively with
Floyd cycle detection and return NULL on a loop; also restore the '/'
separator in phar_get_link_location() so the walk stays idempotent.
Updated packages:
-
alt-php81-8.1.34-27.el8.x86_64.rpm
sha:9bfb6b707c5d1de333e9a9504cd65393efb85431bbe60e0a0a01a9fa32d0bad8
-
alt-php81-bcmath-8.1.34-27.el8.x86_64.rpm
sha:2cfc47b880a3c960171ce4424e1b2c444af7e08e9151bac452ca8831d6bb5cd9
-
alt-php81-cli-8.1.34-27.el8.x86_64.rpm
sha:5eb3194a3015aca39deabec6645fc547e36d65dd9053fa5bdce1baedfc257679
-
alt-php81-common-8.1.34-27.el8.x86_64.rpm
sha:22b5a6ebbffa20ed7d2d8ce0a282a7cd8a0cfbc6f8fb34055ad9384a07947dda
-
alt-php81-dba-8.1.34-27.el8.x86_64.rpm
sha:38d22a38b9628a87d4597d34b97a574c1c9b97b6ba722aadd16cd9565d0fc22a
-
alt-php81-devel-8.1.34-27.el8.x86_64.rpm
sha:252580772877745033539654875188365691e8955b0af28bca453fcd1c4c35cb
-
alt-php81-enchant-8.1.34-27.el8.x86_64.rpm
sha:e89f07d4aca9425254ce545f2355b97734188faeeac00a8f2adb6d85ec42f6f4
-
alt-php81-firebird-8.1.34-27.el8.x86_64.rpm
sha:7f8c72db53dda091b7d73d0e51f86dda101079edf2ced2c0acb02a6af6620cca
-
alt-php81-gd-8.1.34-27.el8.x86_64.rpm
sha:ba862ac9dbecb526a3852de2d6aac4e0c60d516883119819e52723000db24b11
-
alt-php81-gmp-8.1.34-27.el8.x86_64.rpm
sha:076f3d6bee73c74500eeb274d720f4f1b81f86e0afbd2e8f31576f928652224a
-
alt-php81-imap-8.1.34-27.el8.x86_64.rpm
sha:fd60042b134f00de1e6b02c42d41581c9fbc5a1f33964e96204f653a7b3b37af
-
alt-php81-intl-8.1.34-27.el8.x86_64.rpm
sha:d77d53f49aa2319693d008d963ffaa7d3232068066a13c18d6cabb2436a68d93
-
alt-php81-ldap-8.1.34-27.el8.x86_64.rpm
sha:9162a1deccfe06c4467a8db9b7a8bab21abed155440e270195cd28ad6bd4f7ce
-
alt-php81-mbstring-8.1.34-27.el8.x86_64.rpm
sha:327235bf81269d82853946fb5e36b5b6ed5bf20af7bca11c64261b82d1d8bb7e
-
alt-php81-mysqlnd-8.1.34-27.el8.x86_64.rpm
sha:f8ded69551128e4c67c6939ae93f667c91350ab47f68f95c61730429dd4d3966
-
alt-php81-odbc-8.1.34-27.el8.x86_64.rpm
sha:d5ab6e971716984a26560244a31d33db48d8573076ac9b9aacd518fd0f0436a6
-
alt-php81-opcache-8.1.34-27.el8.x86_64.rpm
sha:a5ba50fb273697bdcf867bd9c183513815dd77e57a5af0da8891e4ebc52ab9e7
-
alt-php81-pdo-8.1.34-27.el8.x86_64.rpm
sha:e8fb5cb884114598eaa60b1a171bbb48bdf326b0f945d9c5dfa9932b54857b2e
-
alt-php81-pgsql-8.1.34-27.el8.x86_64.rpm
sha:99b90c733b895365b51f7e2e676078adb182d942101a553ae049d0255972b438
-
alt-php81-php-fpm-8.1.34-27.el8.x86_64.rpm
sha:67fcb401fb8270ea7916cf325d50aab7b51a020a2c8233e3884eae179e61769c
-
alt-php81-process-8.1.34-27.el8.x86_64.rpm
sha:e578e44a9519809509ecd955dd230d2d29eb9c58d25d324bbb13c5d34a219da3
-
alt-php81-pspell-8.1.34-27.el8.x86_64.rpm
sha:3ba883d55be5d28d7e9c1e249583deac65088012a0335fe97fe36de49710893a
-
alt-php81-snmp-8.1.34-27.el8.x86_64.rpm
sha:4ca57b815342f9ab571770bf550b28fb1ab3334dd0fd85499c225cf95176b78d
-
alt-php81-soap-8.1.34-27.el8.x86_64.rpm
sha:a98989daa1855dd8fae0c6fa71b9349401872801249d67e8f712e2557370ce8d
-
alt-php81-sodium-8.1.34-27.el8.x86_64.rpm
sha:d4dd23ce11854b9fc872f51d41a55efecd4d0fd87c5f003930e250287233cf39
-
alt-php81-tidy-8.1.34-27.el8.x86_64.rpm
sha:18c48698f2a35576a3fea9e45264f992edfe464f41a237f2da0714fa33adb788
-
alt-php81-xml-8.1.34-27.el8.x86_64.rpm
sha:6a76614937f0c346e898ed7f6e5d76f65ca3690a3e36f4b88b27fa08506837e8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
