[CLSA-2026:1786356481] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 10:08:13 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:7c29b53f74b6a38eed3a8eb682f5d2c37bd6a1fd
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:5530ca8f40b2c461da25938324aff94f7b02be4e
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:6e37eb3024fc88724a913a34bfd30d43ade8d806
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:ad2c8b5df743fa2eebfcdbf4d366aed0586868b5
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:30882d3f689f2a902f225c747c116f6c55fdbe4a
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:de4a388b76c6774e8c9966ba82956ae4ee8f46ea
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:3b51fd71ba689c93b90f7ff0eaeae504aa70d60d
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:0c35f4fa442f9a83ac3a50b1f0183ddef0e122a5
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:827aa20986dac198e8151f57f21550e9791b5c4b
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:52c54ee32290e4beb2056c9a3225ee5dbb8cf791
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:e52fc4983730c546f17a893a70e1a24f2a387d41
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:46ecfb719d27ca10fc8afdac43d9daf9bf3c96ca
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:7193796d0875732922891d26b155b68c14bb60c2
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:b7a21340fad508120a682b3e2dd7e8ac0c272387
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:fcedd0955b1b734c587babf343b710cc89c947b2
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:992d45b7ff313fedcd264da30aebb280dc08d87f
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:16e44eb62409d27c4912dc218622c6ca26cc02f1
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:7a07d290fa4a9a7ccf999720d5d21245a8d37df4
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:e30fd6be14b77ab08001d039dd49a95b9df05226
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:9743e01802db17894697813daed52f6c02002e9a
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:350063382c0280f0ab37990f283023bbdb07cb1b
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:7bdb7bf3cd447bf8534f2130ec52fe5d500ff757
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:05cdb9cf647aae237e9fcf5fb580eb39d80af40a
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:7369d3a20c41b3638f0a9b385ba39361c75b479b
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:3585e6917a452e6d562d066359e07166dfb4639a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.