[CLSA-2026:1786374594] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 15:10:05 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:412df0dc5a26359a5ba797c8a400cd85eaef2f60
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:e67d3e0088a8b0464b05be11d04e7e50cefa6bab
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:8e52a55d8ffca6fda8b15eed3868904f06545c94
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:ce8d59dd1e4d3796f7055be1c924718a1b5f45ac
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:2b995df013c68954d914b01de1f167d7f193bd1c
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:9d2f88f39c5a9317c70ea93377a81430ef7f089c
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:e5fce3b3b277d5b5725daed20d91f5b65555e9bc
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:9d5a70d2c8bf1db92402a4e9a41ae1e4df3901aa
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:1d97fca3b39cfdfd89a06b56ad655809b79f4d54
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:16f4fcbc44e69ca85726b2f667109911800f0efc
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:9c9315fed6b832029c3d2030942504de8683c474
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:d7e774a29f0bf806cdc64fe9ea9012631fbbc16f
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:e9f82d2a05aa0666ba3e8d58207f5f2eed4abc3b
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:42a94c50a28143a3b2e803462b15e7a6644e4392
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:cad1876b763a7483aaa8633cddb3848204869eed
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:1d9fae6e1453eebc1c86724ab26b8c88df920c86
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:5eb2bf5a3704b1c2e1279b13340e5506735deb8a
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:02eb90ca66abc764615164188d0d3a35e02658f4
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:bbfbfc5e4fcf542b5fe6367917d0ff5e835e9827
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:b5abb449fef6a106ca95ab8f5da6a804c62ef764
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:4f40a82f14e215348593da92112d22bd914108ba
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:19cec1be594c8aaa31a4913294aa05921a9897ca
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:52eac2f825624be95f3a75d7164ddb3e848cece1
  • alt-php80-sodium_8.0.30-60_amd64.deb
    sha:b1debe0f909483c20ffa22f2d7e61b23df42a45f
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:0e66a777431412c582cd3e5693143162fe655029
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:7cb0bfdd22b3a4e1143be50a2475db5014fd4f02
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.