[CLSA-2026:1786221621] php: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-12 14:18:33 UTC
Description:
- CVE-2026-17543: fix SQL injection in ext/pgsql via E'...' backslash breakout in php_pgsql_convert() - CVE-2026-7260: fix unbounded recursion on circular symlinks in phar_get_link_source() - CVE-2026-9672: fix uninitialized LZW table read in bundled libgd GIF decoder
CVEs fixed:
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:59586a836b2c1985d8411efdf4437dfd62a11e7e1c50251f85ff2aa51c295ae6
  • php-bcmath-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:72ec74dc1a5360c132c0fd8451d977dd939286ed18235b6da6b742d5e901b3ab
  • php-cli-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:dc7ae6ddab2bb0de852d9c62e15e1bd6e1f8ea3f215c49a832cd7ab80a1b3a0d
  • php-common-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:fd58cca5796b5afd281ee125dea686c2d56176b9e793a8391a926ed79a8bdb35
  • php-dba-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:01931ddeda847c8c8c98e1bed0b32f0b0c9a187fcd99fc5a958674aec5ab8a42
  • php-devel-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:1472dac5e15ca82a58379113c24230ebabced36e6a279b04086d8260eaa7bd62
  • php-embedded-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:0a64557c9840e7b65252285ddb79e2ce90cb0f4723ddd8762f9314609b48a381
  • php-enchant-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:c45ec115975b116b206c5cca14007091fc43f7347978ceab9cbd920a468ac77f
  • php-fpm-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:874c09b72d2b21266284df6558ef0a3343b9b153df1ded4e62796071d6404666
  • php-gd-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:f70243b7fb7134bad94f8140953e26a6d38f538dfb7c75b4f23c80b6a406d6a6
  • php-intl-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:b6d5ef116f7bb7764f10cdf186d4d33544237aa0fb9ca0d55915d1acd3b0f3f4
  • php-ldap-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:f6ecb2c216a9c54b52c16a0c7b69a8753897e578ec2b4eee4cfebb9d9b25d72f
  • php-mbstring-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:1b1900f026ee33a8db52fff36806b693c8e845c4e56513c68c57e135eab9da33
  • php-mysql-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:eec479792f9bb0f3133779c7e84c7c8f45cb3918bff47bfaba873d306a9d2c3e
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:70f0f9add6e246477dd09caeb3bf0397cda45ce652c64b9e6a9b8e99febe2928
  • php-odbc-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:e222840c88c840fdfac754584a5bcbccf1f91929043b77c699b0203d16ebecc5
  • php-pdo-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:24536847b12fc0d8f3fbddc85793c24e2d0d716f848a4af863610a0e6f76a0b5
  • php-pgsql-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:bad9134329586b445ef2321d7970030db50f4fbe103751e2840ac46232343d66
  • php-process-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:e00227eef338a78448f62228156c85dadab355a9a3b6d5585c81cf7ceb0b514e
  • php-pspell-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:c1d7e55b1ba750207ff3b85e755399f99aacd8a29cdafa0dad9428fcaecaff18
  • php-recode-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:b1254b971a1725eebc3aacae24fb49763bc509af22f72c45cf9bc0e61078d07a
  • php-snmp-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:7006cacc2128734fc90d06aa5d19f5846e18ea034fc55ad35b06dfa1067e54ef
  • php-soap-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:54c58c7e45a3a3269f11a63bc1ffc23ff568df2898e204fb5caeb3732e644ea6
  • php-xml-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:8436a1312dc4780c9c6b662c2278ade8f44528c9c267607fb6955d4a6b7ed281
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els21.x86_64.rpm
    sha:3ca9ff9242b0bf745b750402361382eef0ebee1a07624509425d8da0341b45d8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.