[CLSA-2026:1786388423] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 19:01:09 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:5b40674e4f6cce8f98021c692ae127728b8c15a4
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:3b1d460ab84a0605b71558ce30b6eaed323db71c
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:d06f49f5f29d1a38f715e59fdae86643b5e7597e
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:0654291cbf975dcf668c96b6ee7d90bc26911b02
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:83d69d669ea43f4c6d9edc49107edd9d9343769b
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:35dcffe23a73a04abc0cdc333746b81e92e28242
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:774ad96e38369e16a8a92d497d87bfe379754ee3
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:23206eb253c1ddc6c5b587a07e80b488b70b90c0
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:914b0e3d78127e604aeddec08930ff3a679931d1
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:124666729a1a7870c3526c757d8bed2ac5021d04
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:06b6ae13cae532f7592c4f064fc269a16d1016db
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:10857ddb607e0328fb092c3cfd678b54def456ae
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:66a3206cfba90759e3b27f77c2cf85019075aa4d
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:185cc9ecd716f29e098e7e940f9217de39222ff9
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:51c4ff3796f492eac723b709419c66bde899571b
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:050b9a572c00b566c6a869af592dd6e11da956fe
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:485941ead50a141529255a1690b45b545e5c0764
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:4ef8a6eacb586c52e2b1c8cf19c73268f02f4c8e
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:bd4a3bb571c58c61a1892da2dbbc1977311a511d
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:0313994b175f39b3a0b84e6c66c683f69f693575
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:1ea93b2f3fd3bd696b927ea7261b8be5795c3090
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:e905b6140d4b3977be53776bf7dcf05d82fe1fe7
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:ac2fe93bb1fd0054c93c801254a42b30318a62b1
  • alt-php80-sodium_8.0.30-60_amd64.deb
    sha:b02af9a9b70293b3ccf133e99148a8123e86ce28
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:be3a237ac7f8ee6d671531bdbd59c05f038aa0b6
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:974e13fc905adfdb2972b9641f84c9ad5440c1b6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.