[CLSA-2026:1786526130] alt-php74: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-12 09:15:40 UTC
Description:
- CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead - CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
Updated packages:
  • alt-php74-7.4.33-68.el7.x86_64.rpm
    sha:f53a81c1ac22f0cc1dccc34710026a88243ef9acad5ba147b530f8c6b5b73731
  • alt-php74-bcmath-7.4.33-68.el7.x86_64.rpm
    sha:bbcd79c97f6aa3ffcd3f9684394a5623be40188e20ee17cfcfa187bde2761810
  • alt-php74-cli-7.4.33-68.el7.x86_64.rpm
    sha:a5862efa1978c66a8b289e8d94c8f0068cda7b0f1e0d4905866ff7b0916d868e
  • alt-php74-common-7.4.33-68.el7.x86_64.rpm
    sha:4a27b32e906e4fcb28a1c4abe861f7eca5e53ec74b06efe54f3a0244368701c0
  • alt-php74-dba-7.4.33-68.el7.x86_64.rpm
    sha:76d0753560c64d5f8aeb29ea69e118ac2b791f67e8812823fc5c2dfec4d4679d
  • alt-php74-devel-7.4.33-68.el7.x86_64.rpm
    sha:ee87b0efdf01f220359dce6aace76dd8767f3ab78ae62921f6e9d1398981e1c4
  • alt-php74-enchant-7.4.33-68.el7.x86_64.rpm
    sha:f9d4fa9e4067567d177394a2af2db2d3c2a84a108bc4f2e3e2acc7e9df98fc0c
  • alt-php74-firebird-7.4.33-68.el7.x86_64.rpm
    sha:2b19e88a521302d05f165f7a6b77b65f0d805ecaf9200b43988062de9a6ff984
  • alt-php74-gd-7.4.33-68.el7.x86_64.rpm
    sha:ff32a513ae2f8724f87b8d9a997c9191528f774597107817343e3eac4a07e08b
  • alt-php74-imap-7.4.33-68.el7.x86_64.rpm
    sha:66073ed58db15aa2a5fd059c914e6f360232a282c6c9dfad595c46840aa7eaed
  • alt-php74-intl-7.4.33-68.el7.x86_64.rpm
    sha:ca474e6703da2ac098f684bf6f4c492301734a3afe0ade78f1f1851cce734e62
  • alt-php74-ldap-7.4.33-68.el7.x86_64.rpm
    sha:4a7746773056a53a3cf09ebd1d1f32a81eafb52757a7767415a8a8af0a78a2ca
  • alt-php74-mbstring-7.4.33-68.el7.x86_64.rpm
    sha:7ff46ce85dec48d91c616e4d6f984f720b7259c031c633ba9c7bb00d27312ab7
  • alt-php74-mysqlnd-7.4.33-68.el7.x86_64.rpm
    sha:bdd11a25a05580edccdfcdd7403571d11bdd58103fefe27f538e53a109107501
  • alt-php74-odbc-7.4.33-68.el7.x86_64.rpm
    sha:aae293b101a9a2ac95bd8552d4d1e45b9ac60c9d11a8e6e71b5ea94987027980
  • alt-php74-opcache-7.4.33-68.el7.x86_64.rpm
    sha:65c5ef5c87a759aa54bcbf1e88aa830a912c9c7680d850e4572b38077608a2ad
  • alt-php74-pdo-7.4.33-68.el7.x86_64.rpm
    sha:4751277b8987a78aec658ef3b151ede35d76415f7c895d0b05b0bdcf1ca9dce5
  • alt-php74-pgsql-7.4.33-68.el7.x86_64.rpm
    sha:a087a42db6a824d50c1a8a4b3e031acd4b40614b9a7cb526a297a5519b2bba51
  • alt-php74-php-fpm-7.4.33-68.el7.x86_64.rpm
    sha:3bfbfbb6c35ffac0c6292aee0529cfd6b37af0bf4ef4948986cc494273d98b37
  • alt-php74-process-7.4.33-68.el7.x86_64.rpm
    sha:0b04ec162acac02f9ed772b6302a933b0a70f500a2687fd609ee1d2842a01f21
  • alt-php74-pspell-7.4.33-68.el7.x86_64.rpm
    sha:ceaaabf4dfafd929b5cd953a70a656d3a33f710d281a315cbc1bfae9e04ab7d3
  • alt-php74-snmp-7.4.33-68.el7.x86_64.rpm
    sha:c455716f0f0b32ff4e245e244fa86324701686707cbbb12dd86ea691cb5ab5a3
  • alt-php74-soap-7.4.33-68.el7.x86_64.rpm
    sha:0117be38605ff0ed45660dc68c94099a467ea8e9bfc22a1a43b1490aa716c238
  • alt-php74-sodium-7.4.33-68.el7.x86_64.rpm
    sha:d53280164a37690bc0cb1f7325195aa66b8cd46141634266833f4957694c919e
  • alt-php74-tidy-7.4.33-68.el7.x86_64.rpm
    sha:3b00087547dceec31fd128561d189fc069cad93ddd00d314a3d0d93d66a75807
  • alt-php74-xml-7.4.33-68.el7.x86_64.rpm
    sha:915fd136eb74ea97804b3b46aa32ed0dc01f9c712cff41d0514e417da588d246
  • alt-php74-xmlrpc-7.4.33-68.el7.x86_64.rpm
    sha:5bf9d29eb7ed09f3030d8e8c99a1be5f724327b14951155d57f04888e0ba198d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.