[CLSA-2026:1785755669] php: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-13 12:10:33 UTC
Description:
- CVE-2026-17543: fix SQL injection in ext/pgsql via E'...' backslash breakout in php_pgsql_add_quotes() (GHSA-7qpv-r5mr-78m4) - CVE-2026-7260: fix stack exhaustion from circular symlinks in phar archives by replacing recursion in phar_get_link_source() with cycle detection (GHSA-vc5h-9ppw-p5f3)
Updated packages:
  • php-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:9e53eb1fae1ca2237cf643477f85d9500ac13a8ce05d563a7a41f662aedaf693
  • php-bcmath-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:8776c3ae1436ce587872f16a3906907b1a5b9a1490b22fb0df3561d78d07dd36
  • php-cli-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:f7ab3975d0073f358a84131e53df8fdcbf834cee0b2f383449bd55d1c31878f3
  • php-common-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:f334d1a8b94e7ec95860ea950dfc15f725b6a71fa144f6ea8fd9da4f94b55f6f
  • php-dba-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:b1e5e2cb548d90c3fbb453c43edc669c299abfd5fda78b49842d27e0f041796a
  • php-dbg-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:9cf7f84eca41d813de7f8ab342f9e45675c95c6ff3b5e466bca2452d211a32ac
  • php-devel-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:afcd46fe8c3f022ccc4266324b2f04c8c3d4501854a16146e957292efc68c9b8
  • php-embedded-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:ae871939b170cdc5c48854d986c171da81696ebd7e25db710346b13bfa3104ee
  • php-enchant-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:7ff2d7d53f53f90f944356aef38e51019cc2b55abb0f2a44f0e1e9655fb276c0
  • php-ffi-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:d3354350282c55f60415d574358bd92b28df6700296f121118cf8b4e9e693679
  • php-fpm-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:a465bf767400fe4c8f8963d2c999985cddba6f5a94568dde6e56c006df46c5ec
  • php-gd-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:8d6d39accba075686f4a13af66cd7a23ec1aca2958eb5928fe562dc1fdd94986
  • php-gmp-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:187b15decaee3b543ebac60405062915cb28d851246045c30cbfc3fd8500c2bf
  • php-intl-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:71f5bfb14f374fc9e2c85a2025d357db71cbe866c26a8b53a9e768a6eae34c4f
  • php-ldap-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:ee6832083354b774aa2bea3648f4b5a660156d5d312366e655d08e1015f836ca
  • php-mbstring-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:75c25eab90a8afa2262ecb80d1d384a5eb0e5a25d6f51c303c319d32d314fbfb
  • php-mysqlnd-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:c05d28f2d8fc4faaacedd90ad44ed9e1dcbcaef1272b3d3b77ed4d3af3715067
  • php-odbc-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:23cabf92aaaed432cf6a5c85dbcbf00e5346f594ae4f5aeb85a41d9823b7699e
  • php-opcache-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:ac28184500e4fc498855987a296bfe7d13abb0939d52bb3e0baf8e0c41fc8c44
  • php-pdo-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:2c3367d689d4c2ed4d4134417d973399437362912f26fd3d904e4cfc10d37405
  • php-pgsql-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:d54b8256f8cbf378ea972ded1198ba4acaf4e995b68e8c33dc53aee880d388a6
  • php-process-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:8ef95deda8db69a1c11e873352928499efea7d456bd57e8f40d33c37710ea599
  • php-snmp-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:676b4a10bfcf06c54954c82e4c9704d1437a4f7e116431b7fe46c68ac0717a43
  • php-soap-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:261f13e42570d44d2bc26f28c9b20063b39c6202d0e2ba75cea49b31043c7c38
  • php-xml-8.0.30-3.el9_6.tuxcare.els6.x86_64.rpm
    sha:68c0e42a1141cfdd933a5f5244275b7b751d2e08c28f4da8078e7247dc8b7d96
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.