[CLSA-2026:1786363635] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 12:07:25 UTC
Description:
* CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-70_amd64.deb
    sha:5e03600abca098045c0701ff7d86dde9be1c3156
  • alt-php74-bcmath_7.4.33-70_amd64.deb
    sha:79c314d00215047c40eac0bd15627a08f9fb3ade
  • alt-php74-cli_7.4.33-70_amd64.deb
    sha:da7f7819dfa9df114b58ca0ed6efd96ce9e9cc13
  • alt-php74-common_7.4.33-70_amd64.deb
    sha:19a6fac4fc868302cfe52210af90195fd5430b3b
  • alt-php74-dba_7.4.33-70_amd64.deb
    sha:8ebae61fdee65bd18d9c168fbf58a13705f1d2fd
  • alt-php74-dev_7.4.33-70_amd64.deb
    sha:c05428ec8db315e22cdbb9a6a293d6ee0d18db08
  • alt-php74-enchant_7.4.33-70_amd64.deb
    sha:0775b65d3b230ec67684351afb3a3a6aef1af4d4
  • alt-php74-firebird_7.4.33-70_amd64.deb
    sha:8c8c2f929f1f835dc98600d457eef160e4a7aa26
  • alt-php74-gd_7.4.33-70_amd64.deb
    sha:bec76da6730ec960aee07c58c9c6d2538f5f1fed
  • alt-php74-imap_7.4.33-70_amd64.deb
    sha:ce63757dc02094b3b3142fc447ef5ae53ba553ca
  • alt-php74-intl_7.4.33-70_amd64.deb
    sha:0ccc768e10476117d2c7ed1de6bdbe8969461465
  • alt-php74-ldap_7.4.33-70_amd64.deb
    sha:fb798e86e2c0128218e09b40b4f576ef95c62dea
  • alt-php74-mbstring_7.4.33-70_amd64.deb
    sha:b37b2b6fd2c920ac571e6b836ef4d3c91a0244f0
  • alt-php74-mysqlnd_7.4.33-70_amd64.deb
    sha:12b011ee757c9f919cd81d6d64e223f580bf4de0
  • alt-php74-odbc_7.4.33-70_amd64.deb
    sha:b7288ae8d5fb8e6e3946f8e5e4a1b34a283bfed7
  • alt-php74-opcache_7.4.33-70_amd64.deb
    sha:2aaa4781f88b4235527845a87f6d5679b28a1b4e
  • alt-php74-pdo_7.4.33-70_amd64.deb
    sha:24b3881a9a27ef5d4d4f21cd372e42910ed1cf8a
  • alt-php74-pgsql_7.4.33-70_amd64.deb
    sha:bafc8b6b27842f540ecc966accb77fda22e8d838
  • alt-php74-php-fpm_7.4.33-70_amd64.deb
    sha:410b9e33fb3e461f7449d67e7e2e453cf6f4d429
  • alt-php74-process_7.4.33-70_amd64.deb
    sha:e2b57e3f6c841103b9adb6d873261566d76fa8d7
  • alt-php74-pspell_7.4.33-70_amd64.deb
    sha:784597b7f455282942f4325255133a745eaab33a
  • alt-php74-snmp_7.4.33-70_amd64.deb
    sha:b48abf93b6ef48911356bfb218ce4c403d68cdfe
  • alt-php74-soap_7.4.33-70_amd64.deb
    sha:1c8829367af326a6b91e7d95873d1d74da367150
  • alt-php74-sodium_7.4.33-70_amd64.deb
    sha:e1407947f530a3f0881ca78f31fe9705fada08f4
  • alt-php74-tidy_7.4.33-70_amd64.deb
    sha:514bed7ef0a04172522a7e31481d04e65bc3f8a6
  • alt-php74-xml_7.4.33-70_amd64.deb
    sha:45d38f56c6017f6ab8b1f8bfcef7288186decbb9
  • alt-php74-xmlrpc_7.4.33-70_amd64.deb
    sha:5a7eb945011b4bb99eabde37e760364a7f1e5525
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.