[CLSA-2026:1786446574] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-11 11:09:45 UTC
Description:
* CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-70_amd64.deb
    sha:91a3e998e6e34637e068e7d9369f7e3b0dcba21b
  • alt-php74-bcmath_7.4.33-70_amd64.deb
    sha:2aeb2e18d2d2f6ad04352275bfc054eff6140509
  • alt-php74-cli_7.4.33-70_amd64.deb
    sha:367e8711bdbf17116c159aca3f45627aa900ef88
  • alt-php74-common_7.4.33-70_amd64.deb
    sha:87ffdca81bac089a8a5cc878aac72e90065bc6b8
  • alt-php74-dba_7.4.33-70_amd64.deb
    sha:7b87677c90fe5d7d59d7b11709ce56118ee093af
  • alt-php74-dev_7.4.33-70_amd64.deb
    sha:51dd09063ecf2df14527ddc5e2e7d16022b931a3
  • alt-php74-enchant_7.4.33-70_amd64.deb
    sha:daebecf9255931677974eef1ff4ba43deb69fb9f
  • alt-php74-firebird_7.4.33-70_amd64.deb
    sha:4123b05eb749c83e0831aba10b191e0a0d5ae753
  • alt-php74-gd_7.4.33-70_amd64.deb
    sha:0c55cf369e9691fc1c395ad4d7c39ee0323f341a
  • alt-php74-imap_7.4.33-70_amd64.deb
    sha:f21df569693748ddbdf961a6c3d30befa048bf6a
  • alt-php74-intl_7.4.33-70_amd64.deb
    sha:43469d0b0ee46b9c072554a3df49dfe9d06e1f55
  • alt-php74-ldap_7.4.33-70_amd64.deb
    sha:0d94eb06d1beb434547a92b2f68047f7e65a7f05
  • alt-php74-mbstring_7.4.33-70_amd64.deb
    sha:7504f9044031646f15ce5d91bc64e6a10b27e669
  • alt-php74-mysqlnd_7.4.33-70_amd64.deb
    sha:b0c50e383e9d9302dd0c67ea239a0a0b0a9b1835
  • alt-php74-odbc_7.4.33-70_amd64.deb
    sha:ae49f4eec7efc2ef7c94adc3d34828d163efa242
  • alt-php74-opcache_7.4.33-70_amd64.deb
    sha:efb80c162c11894145f78f22312af015bcae4d7f
  • alt-php74-pdo_7.4.33-70_amd64.deb
    sha:0d09b75c901b67f4ae26b679c907627c7dbfd99e
  • alt-php74-pgsql_7.4.33-70_amd64.deb
    sha:5cef073d26d8673132e861010eae6756c4658cef
  • alt-php74-php-fpm_7.4.33-70_amd64.deb
    sha:530031828728d8a02a6a9f98c1eddaa468f0d31a
  • alt-php74-process_7.4.33-70_amd64.deb
    sha:8b832b226b8b485b88a804bd031f78f16a28f8b3
  • alt-php74-pspell_7.4.33-70_amd64.deb
    sha:0de51eb8b818f66e3ac021522068ca9da287d10b
  • alt-php74-snmp_7.4.33-70_amd64.deb
    sha:27fc9639dda53a3cf8f55baa5a99cdfea07da83e
  • alt-php74-soap_7.4.33-70_amd64.deb
    sha:95d2a1a2928de68c3c58283a73cc67bb2c2034b6
  • alt-php74-sodium_7.4.33-70_amd64.deb
    sha:37053c9b519873efaf055d29338ed91fb68a6532
  • alt-php74-tidy_7.4.33-70_amd64.deb
    sha:8e4e21b93697f141bf409c6abc1ef593088c3acb
  • alt-php74-xml_7.4.33-70_amd64.deb
    sha:9f64a1ce8bd06b331345162e740baf46da32c243
  • alt-php74-xmlrpc_7.4.33-70_amd64.deb
    sha:90ae5b6a8f73fd629835e7f58e4f25582991f8a6
  • alt-php74_7.4.33-70_arm64.deb
    sha:282af1e9e99a621802cd7a2d05c97e7f5c666195
  • alt-php74-bcmath_7.4.33-70_arm64.deb
    sha:c10a25b6d47ecc4d3dbc53651268dfa772727fc6
  • alt-php74-cli_7.4.33-70_arm64.deb
    sha:9c967398edcbede43914ed2d7ee9fd4dfb33f385
  • alt-php74-common_7.4.33-70_arm64.deb
    sha:131599c7f0313b4a8400a3a0ce6e3e1c517099c6
  • alt-php74-dba_7.4.33-70_arm64.deb
    sha:3cc3c065b1ed2f6ce4d41ed2fa8fbadb5420b90a
  • alt-php74-dev_7.4.33-70_arm64.deb
    sha:6e6c6e28e7efc7c524f59dc1685f6639f611b2bf
  • alt-php74-enchant_7.4.33-70_arm64.deb
    sha:ac39aab1f0e5f4e67f98709416f0e8ed024dd4e0
  • alt-php74-firebird_7.4.33-70_arm64.deb
    sha:f970aca464a00168a01353ed6689d6bddafbc8b1
  • alt-php74-gd_7.4.33-70_arm64.deb
    sha:10a65cff7647e7a8583184fbffd1c22b1e306261
  • alt-php74-imap_7.4.33-70_arm64.deb
    sha:ef6505a5898238b66099c66df7d5c66d86d71144
  • alt-php74-intl_7.4.33-70_arm64.deb
    sha:90c367723a012acf4386878092df985078c3d4ab
  • alt-php74-ldap_7.4.33-70_arm64.deb
    sha:3f70047aacc97a14815b0c32a29d0d3c4d4a8f60
  • alt-php74-mbstring_7.4.33-70_arm64.deb
    sha:d0f21c2f585f163d3b8148c3e485a1980abad892
  • alt-php74-mysqlnd_7.4.33-70_arm64.deb
    sha:59a22a1a93b0cad0f79e9a00e68f822258417308
  • alt-php74-odbc_7.4.33-70_arm64.deb
    sha:9ed207f8dac8d1fc05fe2332a4eb46b920eb297d
  • alt-php74-opcache_7.4.33-70_arm64.deb
    sha:4f5822aaf6d345d9a807e8c3def4d9fdafa340ce
  • alt-php74-pdo_7.4.33-70_arm64.deb
    sha:70b1bd20bd15f1c1d1e92c50b66545a6b9b3693e
  • alt-php74-pgsql_7.4.33-70_arm64.deb
    sha:c96ade9b3d02c63b2af37b667f667ec20746111d
  • alt-php74-php-fpm_7.4.33-70_arm64.deb
    sha:d52c595d8f8d48ebcbbc2bcaa5713a7fa6d38cf7
  • alt-php74-process_7.4.33-70_arm64.deb
    sha:04591b40b1f62ab606e2a0f3b97fdb6e2ccdd595
  • alt-php74-pspell_7.4.33-70_arm64.deb
    sha:7cb7830e2da6e1553c63e77cde676b841e3ffbb7
  • alt-php74-snmp_7.4.33-70_arm64.deb
    sha:7750f0fff925e25b1ed01fee38e79bef0bc96c86
  • alt-php74-soap_7.4.33-70_arm64.deb
    sha:747a48218ab701bd43596be00a4b8d5eac59087a
  • alt-php74-sodium_7.4.33-70_arm64.deb
    sha:81f550ae67617644f565ae697a921cf0d8271657
  • alt-php74-tidy_7.4.33-70_arm64.deb
    sha:08d0e267f20008bf81f8144e626d42e5b36b4f5a
  • alt-php74-xml_7.4.33-70_arm64.deb
    sha:aa3eaea9fe20c727e579ede3f225a4f8fe0e5f53
  • alt-php74-xmlrpc_7.4.33-70_arm64.deb
    sha:dddc40b27c446804ff74506c75ba9b3979052dc2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.