[CLSA-2026:1786527488] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-12 09:38:18 UTC
Description:
* CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-70_amd64.deb
    sha:e39d8e7bd979f54b3256d252ceb2d815e0cd1dfd
  • alt-php74-bcmath_7.4.33-70_amd64.deb
    sha:ca07e20f8e9042868630f4be74406091dde05f66
  • alt-php74-cli_7.4.33-70_amd64.deb
    sha:07bda688b39bed0052590a47948bd6ee4b98225d
  • alt-php74-common_7.4.33-70_amd64.deb
    sha:d228dc072fea816083d680fa933eefad434b0b04
  • alt-php74-dba_7.4.33-70_amd64.deb
    sha:9f33085a78a3a8a5d5736f6d305317436d21e878
  • alt-php74-dev_7.4.33-70_amd64.deb
    sha:883742c1a80d19d64edf257487a1cd53f31c295e
  • alt-php74-enchant_7.4.33-70_amd64.deb
    sha:45af48882f1b26d8c7051467ead61f072557da4b
  • alt-php74-firebird_7.4.33-70_amd64.deb
    sha:43382f79874a02b3027712a47eda8f14d2cd7cf3
  • alt-php74-gd_7.4.33-70_amd64.deb
    sha:419f1e976facbf5835a2b96c2b60fb607da47c72
  • alt-php74-imap_7.4.33-70_amd64.deb
    sha:089985de730411389a9f31f937baaaa1cef827a1
  • alt-php74-intl_7.4.33-70_amd64.deb
    sha:df5dd6c73cfce7a2ebe102f8a541f9013e3de0e8
  • alt-php74-ldap_7.4.33-70_amd64.deb
    sha:726f8966720ee6ab21ea441cceed92be213e9760
  • alt-php74-mbstring_7.4.33-70_amd64.deb
    sha:b09e7362806e35c94d63686d03346ef2fbd43993
  • alt-php74-mysqlnd_7.4.33-70_amd64.deb
    sha:31668f4ac9901a8f5bd544babbf26a7af55571a7
  • alt-php74-odbc_7.4.33-70_amd64.deb
    sha:c299f3856a0c88b91a45ef77ae06554c09b160fc
  • alt-php74-opcache_7.4.33-70_amd64.deb
    sha:fc302beb13b33fa2f96b83d174d11b8c68782755
  • alt-php74-pdo_7.4.33-70_amd64.deb
    sha:fcbff6ef3073668fcfd3b6c0f1e0c9c9f137c35a
  • alt-php74-pgsql_7.4.33-70_amd64.deb
    sha:b1fa19500a5633b271d6150bb955bf1c3fa5a11f
  • alt-php74-php-fpm_7.4.33-70_amd64.deb
    sha:14d92812052b55f06afabb2e4852a9517e57fddb
  • alt-php74-process_7.4.33-70_amd64.deb
    sha:3aed70f45a5d16b05f18e877ac32d8dc9aab3673
  • alt-php74-pspell_7.4.33-70_amd64.deb
    sha:2319da75a1241d613831b2d4d710b881a6516bef
  • alt-php74-snmp_7.4.33-70_amd64.deb
    sha:8893ef8e9686259233f1dc5002d942a5989c51fa
  • alt-php74-soap_7.4.33-70_amd64.deb
    sha:b7091baac27e59e29c9e65476b98604d5103c44b
  • alt-php74-sodium_7.4.33-70_amd64.deb
    sha:0087577ac18575e495b36de158c402c506791903
  • alt-php74-tidy_7.4.33-70_amd64.deb
    sha:c9443f088860cb0206fe4cf39d73aa38f62f1bfc
  • alt-php74-xml_7.4.33-70_amd64.deb
    sha:a1cd365d0a454c731b48d4d8a922b06ebfdedb07
  • alt-php74-xmlrpc_7.4.33-70_amd64.deb
    sha:6a1eed2fe862e6a69e75b4828c0375147662ca79
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.