[CLSA-2026:1786594834] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-13 04:20:49 UTC
Description:
* CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-70_amd64.deb
    sha:0206ebfa6b1af8a45cb3305464f0f4118b2f0864
  • alt-php74-bcmath_7.4.33-70_amd64.deb
    sha:62a590f8f9faf6ed93b4818a7d5573f9f6eb020a
  • alt-php74-cli_7.4.33-70_amd64.deb
    sha:cc8b83172413a9673071c2951436e0fbcbe8b2ce
  • alt-php74-common_7.4.33-70_amd64.deb
    sha:6212c6a830b2880525280c6950ac90748599d01e
  • alt-php74-dba_7.4.33-70_amd64.deb
    sha:ec3f134db8cad46d5d333bb70583563edbd76316
  • alt-php74-dev_7.4.33-70_amd64.deb
    sha:a6bb312209bac2a867aafbdeb6286dabe2eee918
  • alt-php74-enchant_7.4.33-70_amd64.deb
    sha:54b16089f5289d501cb897044754e921b6c71cb3
  • alt-php74-firebird_7.4.33-70_amd64.deb
    sha:fd3536c41d34533d5c51bab8ff1a7ed32833be74
  • alt-php74-gd_7.4.33-70_amd64.deb
    sha:dd0245beed4ac15810f7f107b935643855b10f98
  • alt-php74-imap_7.4.33-70_amd64.deb
    sha:f1376031f4edac8ea1b0fb3e47ef8b52cea6fb2a
  • alt-php74-intl_7.4.33-70_amd64.deb
    sha:892a7c42eb43c52291245575a20c84225554719c
  • alt-php74-ldap_7.4.33-70_amd64.deb
    sha:87446edda92b544cc1b2308631bf1a4f36ec2889
  • alt-php74-mbstring_7.4.33-70_amd64.deb
    sha:43e48a89de28fba0eeb253dfaab5bbe3590d8821
  • alt-php74-mysqlnd_7.4.33-70_amd64.deb
    sha:33a0b55e795b3bfd66b158acf9fda8eae343bc84
  • alt-php74-odbc_7.4.33-70_amd64.deb
    sha:beb914022dc0dae7154ed63c188b912171a194da
  • alt-php74-opcache_7.4.33-70_amd64.deb
    sha:eb352fdc904db6b53112c161d8dec2fe0e058107
  • alt-php74-pdo_7.4.33-70_amd64.deb
    sha:4e1733545a35903c3075901603bbdf1bd21d1b9e
  • alt-php74-pgsql_7.4.33-70_amd64.deb
    sha:5aa336955a10eeb1ab96953b36de526edb249e61
  • alt-php74-php-fpm_7.4.33-70_amd64.deb
    sha:7a26fa9a1da8282ae13a9b676bb7e3e56a99eb8c
  • alt-php74-process_7.4.33-70_amd64.deb
    sha:33c4937bda3b9720330e8d0b6013b3036ee8778e
  • alt-php74-pspell_7.4.33-70_amd64.deb
    sha:3c5dd19b6f7fe5f0a60d4c8a44b2ae48b1319a4f
  • alt-php74-snmp_7.4.33-70_amd64.deb
    sha:14f24004198661f8c64c875a9114297fc16c4a06
  • alt-php74-soap_7.4.33-70_amd64.deb
    sha:7bbce4ab1a8fb27bd5a7c89145751aaa2c51f5b2
  • alt-php74-tidy_7.4.33-70_amd64.deb
    sha:7a7100175b9bd3dcbc922370e2840b2aa9a1b52b
  • alt-php74-xml_7.4.33-70_amd64.deb
    sha:613cd0f40895fc2d70d51a214783514c10f098c5
  • alt-php74-xmlrpc_7.4.33-70_amd64.deb
    sha:11d68e2d1d867a3f5bea74f5d7c80d351b3063c0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.