[CLSA-2026:1786523920] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-12 08:38:51 UTC
Description:
* CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-70_amd64.deb
    sha:72a4a059224988e98e9651cc92856231b54dde52
  • alt-php74-bcmath_7.4.33-70_amd64.deb
    sha:045fbfc448bf9dd5638079f9174c13b3a04c1f9e
  • alt-php74-cli_7.4.33-70_amd64.deb
    sha:21263bf69e28f0d0756d8ebcccfefb65acd67b0e
  • alt-php74-common_7.4.33-70_amd64.deb
    sha:e89610876ed408b446995813560a5e69778098fc
  • alt-php74-dba_7.4.33-70_amd64.deb
    sha:78e327fca9d8bc158b8df4a1dbedb31b83d31743
  • alt-php74-dev_7.4.33-70_amd64.deb
    sha:0e68605be17b6fced39cec27d7e05d73ce3a4fb0
  • alt-php74-enchant_7.4.33-70_amd64.deb
    sha:216c69fbc97cd015a07629edfa894c7466cbd549
  • alt-php74-firebird_7.4.33-70_amd64.deb
    sha:86bc55dd3a23b9da42262074ff2544172a646ed1
  • alt-php74-gd_7.4.33-70_amd64.deb
    sha:0f9a5a4d3c248fdf434e3af09f2b419bf8ff46f5
  • alt-php74-imap_7.4.33-70_amd64.deb
    sha:742027a10106fddb7d3efc88820bfc4ff2665886
  • alt-php74-intl_7.4.33-70_amd64.deb
    sha:f9133bf2a42fe0ccd173492adf37269860efb0e5
  • alt-php74-ldap_7.4.33-70_amd64.deb
    sha:06c4a78c6b9ebfdfbb19d6193307efb52701327e
  • alt-php74-mbstring_7.4.33-70_amd64.deb
    sha:3ae38f2892536a2a063e1f2758c03a6670d95d76
  • alt-php74-mysqlnd_7.4.33-70_amd64.deb
    sha:c53dffe9c860097bfbbdf5c9c336581f7fdff326
  • alt-php74-odbc_7.4.33-70_amd64.deb
    sha:eb0536cebf813e9e19d27c07cd5c3276b40a365e
  • alt-php74-opcache_7.4.33-70_amd64.deb
    sha:4ce0b5dc8b3019abc50c18a5deeb7319d78a5141
  • alt-php74-pdo_7.4.33-70_amd64.deb
    sha:39e075103fd9c70792bbb3f68e761d80378d8b3d
  • alt-php74-pgsql_7.4.33-70_amd64.deb
    sha:f43f181eb60a2c9b0a6fabe67251ca691d9ad322
  • alt-php74-php-fpm_7.4.33-70_amd64.deb
    sha:d4d1f15ea222708a6a8737d008fa48f6d6e91479
  • alt-php74-process_7.4.33-70_amd64.deb
    sha:d445db3ea6311fc10334b0aeb29b9d9858c83de3
  • alt-php74-pspell_7.4.33-70_amd64.deb
    sha:413b0fa7f25afd93c5f90abb275bb96f0d4745e9
  • alt-php74-snmp_7.4.33-70_amd64.deb
    sha:4f0d5305f91b0aa895a5b65a9e7997863e04137e
  • alt-php74-soap_7.4.33-70_amd64.deb
    sha:55bb64db69cca94660bcf0ffbc4324b86f2681d2
  • alt-php74-sodium_7.4.33-70_amd64.deb
    sha:7f6d1072be95e882bc06e3a3ddfcfa2a0e37676c
  • alt-php74-tidy_7.4.33-70_amd64.deb
    sha:1dbdee31958c5114fe2b989f6adf723408c9cece
  • alt-php74-xml_7.4.33-70_amd64.deb
    sha:2650a4002bff11a0bfea8e54714052342cc46f80
  • alt-php74-xmlrpc_7.4.33-70_amd64.deb
    sha:c691dd72b7a2f30f8278c7d58752f36136ef977d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.