[CLSA-2026:1786386846] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 18:34:35 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:5b40674e4f6cce8f98021c692ae127728b8c15a4
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:6f0ff10232208ee060a64d78352af1824f899d05
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:313a0b2e521e4d7780fd9420fa1e9f7401516695
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:c9fce4c1e2da616f033dff28b8ace00678af4297
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:9feb7da0955a6043c777b665c3d7404cf245ac71
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:c2505d33a66375363d898cf9b6e64b1f4ba4d518
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:414a92ac9fefb57330c53f2311b199ddae1ea40a
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:e4457f1645132cf79dd30123cbfb78f180059d91
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:cae7dfa57666fba68a62b2a54aedf5fe6f2ba11e
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:6f0023c0ce405b130b0ba734133ed0617ea712a0
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:9209071618f6a15647ed7b8e01d263ecc0a1fd48
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:55d91f221db6698e6f176e316a7c2297da69127f
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:24e8dea5a22910582d65642286c6440f392575a3
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:f81592c9027024bcfb83685b827fbfc4e52c1ae6
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:673aff6c6e0300cb7840ac7f8635c3675b3345b8
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:cf6b9b6e6921d7731e8994b4331191a748e70700
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:773d88bb6c945c12c5f734b25c88bc8567cfa9db
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:d143d744a4bc92e31b0d6ed085eaf789e305df32
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:6e874a696ddee9f756876aa1ccc1d280f4b334fa
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:fe1aa7af503c44fa766b6c87906f42be905b3dd1
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:a9e5f9fd1d20799e4c9ce9774a4409f6ee8edd82
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:b05530455c8e1f50997f3a84a1c1181111929d77
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:9468d3598bdd100be53fccd40761434a7c86c92c
  • alt-php80-sodium_8.0.30-60_amd64.deb
    sha:4fc8a957910ce29048371778d88f9b925974f666
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:eac43d4e3758c03516ca7b29f41113c86e369208
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:4ae4b4d95ddfc35aaec83f1ff1d86ca7b42b7fef
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.