Release date:
2026-08-10 09:50:32 UTC
Description:
- CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped
values escaped by PQescapeStringConn() in an E'...' escape-string constant,
but that escaper leaves backslashes untouched when
standard_conforming_strings is on, so a trailing backslash escaped the
doubling quote and broke out of the literal. Drop the E prefix so the plain
'...' form matches what the escaper produces.
- CVE-2026-7260: phar circular symlink crash. phar_get_link_source() followed
symlink chains by tail recursion with no cycle or depth guard, so a tar phar
holding circular links exhausted the C stack. Walk the chain iteratively with
Floyd cycle detection and return NULL on a loop; also restore the '/'
separator in phar_get_link_location() so the walk stays idempotent.
Updated packages:
-
alt-php81-8.1.34-27.el7.x86_64.rpm
sha:d015faad00b8b5d68aa5ce125cd800d9b25c0305bb5a7147194d1797de0eb188
-
alt-php81-bcmath-8.1.34-27.el7.x86_64.rpm
sha:8ddcc690244ce998df89c1826b858bbe850ccbb51aab4325b754e23c0cc29053
-
alt-php81-cli-8.1.34-27.el7.x86_64.rpm
sha:5151951f12d9762801eb25dc0673edfb977b9b22bd842e939b7474cce39be03a
-
alt-php81-common-8.1.34-27.el7.x86_64.rpm
sha:96305761fa8b142c33549c287de4a9c17fb2e37ee241847aaeb7ae724d3ece90
-
alt-php81-dba-8.1.34-27.el7.x86_64.rpm
sha:513b72274adb7971e1eb3fd89749e90aa4eec6be654e5d35afe6a87014655be2
-
alt-php81-devel-8.1.34-27.el7.x86_64.rpm
sha:438e700c54d3dbdf63313480a1d0982f624bfb63a7aa96e032400d3288caefb3
-
alt-php81-enchant-8.1.34-27.el7.x86_64.rpm
sha:19f647009613192335693618429a8b552e4b38e3662d528a6657d7cdac85d1e1
-
alt-php81-firebird-8.1.34-27.el7.x86_64.rpm
sha:fdd8c8488cb286fc88380e1d5a2b056600d3038a74b459d305c0704a0ef0701c
-
alt-php81-gd-8.1.34-27.el7.x86_64.rpm
sha:59002e9332b5d9cc7388baa62da01642c6a9f884e103703547fa6e6754574c21
-
alt-php81-gmp-8.1.34-27.el7.x86_64.rpm
sha:a0aece31c99cd6a3335c002ebb8197887696739cbe1b3429fb4b8e2c72bcc389
-
alt-php81-imap-8.1.34-27.el7.x86_64.rpm
sha:0273044ae05de1896f3a9cedc0b69957fa380198794c41257f8ca65e06449ce4
-
alt-php81-intl-8.1.34-27.el7.x86_64.rpm
sha:068667a2bfd1d340b72b90f9bf73f0f85e56a208810eed9b614f5962a7796463
-
alt-php81-ldap-8.1.34-27.el7.x86_64.rpm
sha:308c2aa60ae0be353681971cf8b2d3894e462f17f11d39a8cfecf422edd73dd0
-
alt-php81-mbstring-8.1.34-27.el7.x86_64.rpm
sha:143f2083099ff106dea29955bd6af550ca88c5030513a5ae624797f224e15386
-
alt-php81-mysqlnd-8.1.34-27.el7.x86_64.rpm
sha:86045977e2762c4db4993efdbd5b4ab332f41261e965c89fed57ec5b74554303
-
alt-php81-odbc-8.1.34-27.el7.x86_64.rpm
sha:0a3664594dee9375c0be2f5b75e678ddce9f5cec1be09a0f1cd8fc2a6d8116c5
-
alt-php81-opcache-8.1.34-27.el7.x86_64.rpm
sha:9cae308693033b67b570213f4270854e8c900906bd902c288343fc7c86d7e60f
-
alt-php81-pdo-8.1.34-27.el7.x86_64.rpm
sha:b8fbaac23c4cee4cd40f1291f1332929c33054af834bce5e57eb0bd0033c00a7
-
alt-php81-pgsql-8.1.34-27.el7.x86_64.rpm
sha:57f891955785e48b4bdce32f1b3927df7ed92264a652e83a35fb6e85e50db973
-
alt-php81-php-fpm-8.1.34-27.el7.x86_64.rpm
sha:cf7d558367626865b07b2aa188f01076c4a869b20396df705f9e50fb48bf39fe
-
alt-php81-process-8.1.34-27.el7.x86_64.rpm
sha:b79234a5fd870ff9f690bd42c298123e3afc0fad030a25c9167a4e2e2c1123d9
-
alt-php81-pspell-8.1.34-27.el7.x86_64.rpm
sha:753482be7ab7d74e65363f9527a84c61a74b47b99f4952f4d06d97a7146a9eea
-
alt-php81-snmp-8.1.34-27.el7.x86_64.rpm
sha:ec61045fcd2125e78f91e14655c04747389bf8b0adfb16850946c3fc17955608
-
alt-php81-soap-8.1.34-27.el7.x86_64.rpm
sha:41e6dd267e5ee9510c2a3d0959bbdb560d3428ae14bb9edcf6aabb31a3ab2ca7
-
alt-php81-sodium-8.1.34-27.el7.x86_64.rpm
sha:c681de92231c4c15b0ebfeec2384b724e7cab68d2c547714891efbcf3e50675b
-
alt-php81-tidy-8.1.34-27.el7.x86_64.rpm
sha:1c6c193e057286da70ee76e76a05cfd42255f55a226eeb556aeaa672b4aa313f
-
alt-php81-xml-8.1.34-27.el7.x86_64.rpm
sha:10e28bb70341f4f795304f226630203b5c3673b96534e0edb9bc48167776b16a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
