[CLSA-2026:1786374026] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 15:00:40 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:5d029431efc912ae39bea1f9e06ee8195ede32c9
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:c5cb217714c050644885ed868b966e2cbfa4c1aa
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:b00619910d104be0cd116c517391198fa994994a
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:f609260c428827b183b6c6a0d88353c13bbd1ad5
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:4b7abd53e620c727f0a40678ffd2bc379c7d723d
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:ba48375f188dc195efe43cdeb6f2572df7202b63
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:4c0d98110a9145c5bec1b8c54d91f80b6a457af9
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:17393bec74ea9b9986c85a904bb8338246299c19
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:87b7b7fb76b5d825ed55defefaf037588bcfb93b
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:8fe458ec108b61337b824d0026d00e15882ef052
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:41e96c38353b4ab4c4b9d73f689e0b4dc8bf78c4
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:010be6e3390d4a7130d59491183f04d97ef62fc9
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:1df6300a41ef4656a64ff05d64cf9435886d9aed
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:9976c71612bfbefba5bdae47524399f541c21ed9
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:28af5613560f129594de08925ac21be9d6f40e57
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:b7e3cc2c1dd92e54bc0e7be6045bb9bc8267d1e4
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:2504fa0a61264603d9dfb7455fbfb69ab31f7914
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:bdab4101950236b1358bb67f1dc8a26509e4201d
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:e4c6e302f2a8347fda7c801602e025427a64eaf4
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:e873cd3b292377058b4825bb620a74494cd659c7
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:1946726e1272f799c3e34db7dc3b18c63447466e
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:b902c55caa30c4cf8bef8ec4efc2be496ddbcb18
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:5389ed72452bfa33d15a30507ed748d25fcaa049
  • alt-php80-sodium_8.0.30-60_amd64.deb
    sha:cfd82e471be6da517b6ab15544a6ffbc37451290
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:f0853c7cb8394ba8604a619731af5913b23458cb
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:c4fce0ed20e28514c09abb89e7f174f46d562d45
  • alt-php80_8.0.30-60_arm64.deb
    sha:e62b8dfe9b6d500357cb5c26c9fbb634dcd26d57
  • alt-php80-bcmath_8.0.30-60_arm64.deb
    sha:c37bcafa3f96087282b45a5799e0c8dc3cb203db
  • alt-php80-cli_8.0.30-60_arm64.deb
    sha:6b867d1ceb6aa991d5d9ee684ee197910f0c1c79
  • alt-php80-common_8.0.30-60_arm64.deb
    sha:8dd516289ab00f0320cfab1108e39d530629bec5
  • alt-php80-dba_8.0.30-60_arm64.deb
    sha:863e1daa0b87fb1a8d237465bf0930f2ff4c8bc8
  • alt-php80-dev_8.0.30-60_arm64.deb
    sha:95b7d4498dc419eedf97c04ee6fda609b8879f2c
  • alt-php80-enchant_8.0.30-60_arm64.deb
    sha:1cb546362c53e59babee97c3368c00964fa89eca
  • alt-php80-firebird_8.0.30-60_arm64.deb
    sha:2e3af17ef87d64a6b8f936dddee64f16cd616320
  • alt-php80-gd_8.0.30-60_arm64.deb
    sha:d53b6aa031d7d8ddd551e0a7e508c56cedda51eb
  • alt-php80-imap_8.0.30-60_arm64.deb
    sha:c27a8e269e41fb2a2a9d61b847675e9d710e805f
  • alt-php80-intl_8.0.30-60_arm64.deb
    sha:4b2456df7bc918d14388d90f291d6d7a1b3717e6
  • alt-php80-ldap_8.0.30-60_arm64.deb
    sha:79608089278c42e85e31843527cbcaab881c5cd3
  • alt-php80-mbstring_8.0.30-60_arm64.deb
    sha:d01bd6767cb2bf1066f61127564f05b54132fe5f
  • alt-php80-mysqlnd_8.0.30-60_arm64.deb
    sha:57793f2050522baffa9f81b94b599d1c5c535852
  • alt-php80-odbc_8.0.30-60_arm64.deb
    sha:51fd410afb253483eecd38a82749c2aa446b9376
  • alt-php80-opcache_8.0.30-60_arm64.deb
    sha:f3ade507d66b0f5b5addaaf6086e8dc2530f43af
  • alt-php80-pdo_8.0.30-60_arm64.deb
    sha:c9808f9afbda819b7e161b249b0fcf5379930819
  • alt-php80-pgsql_8.0.30-60_arm64.deb
    sha:4786569a1a8e2ca74d1a000aca86c0f6b5ad8f08
  • alt-php80-php-fpm_8.0.30-60_arm64.deb
    sha:5f1e2f3b50feecd9f7e8fe34d199720d8b653a58
  • alt-php80-process_8.0.30-60_arm64.deb
    sha:f70b1fa993fb0632bd0eaf27e6bf16c9a1d5b841
  • alt-php80-pspell_8.0.30-60_arm64.deb
    sha:8417b6a99fee7ce7f0cec5659b70abdf5822653d
  • alt-php80-snmp_8.0.30-60_arm64.deb
    sha:6874a3c878f509ecaf81b9f436a95b4a7dc59571
  • alt-php80-soap_8.0.30-60_arm64.deb
    sha:312a0340d2e794dee8535e97b47f0a2b4007b9ff
  • alt-php80-sodium_8.0.30-60_arm64.deb
    sha:7c474ddfc55f8ae26ea3c89aa23366f5476d87f7
  • alt-php80-tidy_8.0.30-60_arm64.deb
    sha:e886a144eb12b9d3647cfed401849385719f5a31
  • alt-php80-xml_8.0.30-60_arm64.deb
    sha:a33f9eb7db8b8e8fa287bcfd2078759d0382f728
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.