[CLSA-2026:1786441795] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-11 09:50:06 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:412df0dc5a26359a5ba797c8a400cd85eaef2f60
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:bcb30c501f291905f287eaba70a2d9fed951abae
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:90648fbcaf4d6a1a25679300e408551f131c264d
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:ba37c2c97122c87277f5e4fb50ef5673881b85f1
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:56c50ea807c1a40bf5eed14bf70859468ef6280e
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:4c37c75821a94c01b828e59a155bc1a1eb3b9ea2
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:2acdc01429543c4187429deb53bff566296f67e5
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:dbd41c95ae9f947717526ddcaedaa8cf6bf97736
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:4e6c250eba42d17f39c8173cfee9029067e0a711
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:35a05dc8cd583192e1e2544fb89b9725757b5972
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:10abd5cb259b54ed1e0df96f6db5dfff9909e22f
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:f9ebc766cdba9d539878691e45364e2a39310df0
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:1fbfd7c73274c5dc36cdc9d87707666c35674283
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:51047303473d9ec203a6d3863bd1da8c734253f9
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:26065db399e55252538e4bb117f3614bf7f4dd17
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:68b1ccfa217ebd2a5cfaef497b52c777365dc6f4
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:74f25ee5a7fa3286c5ff6577f29881c09aa57a51
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:91d747a353fe77be2d6bf146463793a6c32dd2d8
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:bcfc802d9a337b2afc0854088299129aadebcc2e
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:384cdcd1c3dc46c76bd3c3ab4bd01027df38cd46
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:cfcae18634f0538ef602761c998df6a4b0338d3e
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:fcd24429d19d0fbb4ceb005524ecd9b38d5d65c3
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:faacea970fea2f1364e09c3654c6c69d99d5098e
  • alt-php80-sodium_8.0.30-60_amd64.deb
    sha:5de50f3290db68c27aa5008014a19df77ed36e74
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:a89db9a2e4a44665fd38f98aaca07ffdf361720a
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:6123f5782f7bf53b47c1a0a8bfb7ded6c55446ca
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.