[CLSA-2026:1786389774] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 19:23:07 UTC
Description:
* CVE-2026-17543: SQL injection in ext/pgsql. php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' escape-string constant, where a trailing backslash escapes the doubling quote and breaks out of the literal; emit a plain '...' literal instead * CVE-2026-7260: stack exhaustion in ext/phar. phar_get_link_source() followed symlink chains by unbounded tail recursion, so a tar-based phar with circular symlinks crashed the process; walk the chain iteratively with Floyd cycle detection and return NULL on a loop
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-60_amd64.deb
    sha:5f7ba4c69d68923521cfb94f4e49d44b43ddd42e
  • alt-php80-bcmath_8.0.30-60_amd64.deb
    sha:fae3388c01015bda5b8ce642aae2b7bbeb2baf65
  • alt-php80-cli_8.0.30-60_amd64.deb
    sha:68471601badead2858658ecc2530e149454e5a99
  • alt-php80-common_8.0.30-60_amd64.deb
    sha:b3af907a8824cddb43fa29e5c84bf2f079ee51bc
  • alt-php80-dba_8.0.30-60_amd64.deb
    sha:f01fb0668a6296744df30f05cb467f5b607f54c2
  • alt-php80-dev_8.0.30-60_amd64.deb
    sha:bb18871c2ffcca8529767d8dab488eec145e018e
  • alt-php80-enchant_8.0.30-60_amd64.deb
    sha:54e82d07aa969d4454109834aad84675e4684901
  • alt-php80-firebird_8.0.30-60_amd64.deb
    sha:4ea847c48958ee37b63cc096045055a887016144
  • alt-php80-gd_8.0.30-60_amd64.deb
    sha:57e23c8d2ca256580694fa01a8273e3fe9995214
  • alt-php80-imap_8.0.30-60_amd64.deb
    sha:23ab24bac1b5978b4af75cb6f858a61d35fcc333
  • alt-php80-intl_8.0.30-60_amd64.deb
    sha:33c37318af64e9ad6a83f0bf2763ca258a8d30dc
  • alt-php80-ldap_8.0.30-60_amd64.deb
    sha:8ec74ffd214fbb223f92d44ae805490245941dc9
  • alt-php80-mbstring_8.0.30-60_amd64.deb
    sha:81f18b3ed07ab3fc79f5a6adbc473b4ccde4276d
  • alt-php80-mysqlnd_8.0.30-60_amd64.deb
    sha:8dbdf0e05f4cefa11396b22da634f8398a15a5c4
  • alt-php80-odbc_8.0.30-60_amd64.deb
    sha:a6f909fa44742cc0519511c5c8150b4056a24fd8
  • alt-php80-opcache_8.0.30-60_amd64.deb
    sha:fb0406d4ecf86d425dd197f6811341bf8a61ee9f
  • alt-php80-pdo_8.0.30-60_amd64.deb
    sha:16913888216adbe275beafcbc5ce0768e97dc685
  • alt-php80-pgsql_8.0.30-60_amd64.deb
    sha:a64c125038b36fc79153a5a94cdb3de641aaf1c5
  • alt-php80-php-fpm_8.0.30-60_amd64.deb
    sha:9a6ecfae18712a8bbe319b903f52a633154e9c51
  • alt-php80-process_8.0.30-60_amd64.deb
    sha:f23933fabebb0ea363a9f66379c0f8cbffeabe83
  • alt-php80-pspell_8.0.30-60_amd64.deb
    sha:050c72e958c8e1dfcc78e8ab3ac26761bcf1a3cf
  • alt-php80-snmp_8.0.30-60_amd64.deb
    sha:8e1a67e0588de489a9c9fc6e3dd46846675353fb
  • alt-php80-soap_8.0.30-60_amd64.deb
    sha:0a4191b38543ba0edc475edab8f084497ed8fc45
  • alt-php80-sodium_8.0.30-60_amd64.deb
    sha:e652f8d921cb18855a3c23f999787fe5c9cb49a4
  • alt-php80-tidy_8.0.30-60_amd64.deb
    sha:020d8c15f60d75b4e40819157f058bc230caf981
  • alt-php80-xml_8.0.30-60_amd64.deb
    sha:35b87fa941226e28ab6b63ad11faa8d50c100e7c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.