[CLSA-2026:1786387606] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 18:47:17 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:54915b4399f43eab45b0f1dfd9fe6af6559c1907
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:df871bc66f6c9bf02b1ae3b46dd7800b20c890fe
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:f5eeae8a17f304a563c5ca24afd051ebf4ff4fa5
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:869e4c883e3e94a7496deb0072750f98e688ad6d
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:56cfc2d6f42b38302005aad6869ba5f3456f5e4b
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:970eeef997d99d1c1984491ed7cd8d20c8bcdc8f
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:9ce8c7b883e3dd07b94e183dfc2604781578f61b
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:8e54d8e298921a8d55ca676d4d62e583169d75ff
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:74061e4d83f4326a42759333fb947e6cf850d561
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:214ea34c6d103df5f4995821ab76a313445a12fb
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:72b6cf8cfcb8624e602cf4c7e24e1870883ed8f3
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:ce019cfc464cb298ac5100e22e6e46b9f4ae69e0
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:e0586a1aeabf9785993f2373da9f75e0c6fe392c
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:93b6eb04b9e30022755151688db0c37d85918291
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:984a6fc15f36538219e421e0cf806b0a0ebbc9eb
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:6c2ff10572a7081abd0cd5cef433059ed53833e8
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:1e85d02afeccea5f5e4a182534d131ae3fe1492e
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:e1919776965bb7213e58507576c004f63dfbeb2f
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:b907d43d2035ace0e7b0be562c424fad8b904f95
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:04bc1ef7847f20e76ddd01993640abbcc3db32c9
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:85d4ef3083696f085021417e4b0d845d1ea31e27
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:0785c0346493e0c4712385c634504e4a4434edbe
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:484d0ce6b187437f25cdcb45df51e3368ac5f5ce
  • alt-php80-sodium_8.0.30-60_amd64.deb
    sha:970950811a02d4c3bb59cd47f6c341fe67ac3cb3
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:026ba4bf45b75abfcb7b7300672bf0796c666ff2
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:5447dcafca4c69b5c720f53cfd8fd5a5b9bc7c69
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.