[CLSA-2026:1788434240] Fix of 68 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-03 11:18:24 UTC
Description:
* SECURITY UPDATE: improperly escaped SQL and NULL dereference in ext/pgsql and ext/pdo_pgsql - debian/patches/php-5.5-CVE-2025-1735.patch: check the error status of the libpq escaping helpers (GHSA-hrwm-9436-5mv3). Every PQescapeStringConn() call passed NULL for the error out-parameter and the PQescapeByteaConn()/PQescapeIdentifier() results were used without a NULL check, so an input libpq refuses (for example a byte sequence invalid in the connection's client encoding) produced improperly escaped SQL or a NULL dereference - build_tablename() crashed pg_select()/pg_insert()/pg_update()/pg_delete() outright. - CVE-2025-1735
Updated packages:
  • alt-php55_5.5.38-175_amd64.deb
    sha:0145139b6b961ba041118668b8c6fce03d0c9c87
  • alt-php55-bcmath_5.5.38-175_amd64.deb
    sha:c1935c1af8553d1b6b34cafcfc9bbff7eac9ad77
  • alt-php55-cli_5.5.38-175_amd64.deb
    sha:640002c50a8c409c29c88656eaffcc15c7ff535c
  • alt-php55-common_5.5.38-175_amd64.deb
    sha:481818c9ae1731caa8d54c790e112f94070e051e
  • alt-php55-dba_5.5.38-175_amd64.deb
    sha:40f6f0a81d94765674d26ba55373fa78ac240874
  • alt-php55-dbx_5.5.38-175_amd64.deb
    sha:7b04dfe2030c55123fbd7b44ff3946656768ae03
  • alt-php55-dev_5.5.38-175_amd64.deb
    sha:1884662634dd6a3e86d53ca37eceb553792e9ef5
  • alt-php55-enchant_5.5.38-175_amd64.deb
    sha:c8252ae30df51e27078cf63dea4c995644f17a92
  • alt-php55-firebird_5.5.38-175_amd64.deb
    sha:ee99ef4ea4a81fadfe0fd5e50b63e1e39d9a01b4
  • alt-php55-gd_5.5.38-175_amd64.deb
    sha:2cf074b4db595754ce65bd96708f10253229ca0b
  • alt-php55-imap_5.5.38-175_amd64.deb
    sha:94c5336965dad586c83757efac53c0b9f219781c
  • alt-php55-intl_5.5.38-175_amd64.deb
    sha:287b0e28a5e333dcfbb2782ae4eab9afa91d8d63
  • alt-php55-ldap_5.5.38-175_amd64.deb
    sha:c551989ae282482685a262e1874a01ecd35b48c3
  • alt-php55-mbstring_5.5.38-175_amd64.deb
    sha:ad233672fc2686877917bd8023be3c05c371d30e
  • alt-php55-mcrypt_5.5.38-175_amd64.deb
    sha:5e65add639d0b70e5ccdd89f854ae9a51f306950
  • alt-php55-mssql_5.5.38-175_amd64.deb
    sha:a38c8717ef611aac614c979af31bb8b025e8c45b
  • alt-php55-mysqlnd_5.5.38-175_amd64.deb
    sha:e28b1f9191e12cb9092472f5af1220c2b83b4c3f
  • alt-php55-odbc_5.5.38-175_amd64.deb
    sha:57344086f4eaaeaa2eea8afd21e24f4e9e374247
  • alt-php55-pdo_5.5.38-175_amd64.deb
    sha:6e37e447de4de9d4ea1c3aa6a4bae99590351ce3
  • alt-php55-pgsql_5.5.38-175_amd64.deb
    sha:f6ae76c938bf0500c6664226f2bb3f12fe0e6e16
  • alt-php55-php-fpm_5.5.38-175_amd64.deb
    sha:cf3e2b905f15ec78e6f10a36b08567cf0677f927
  • alt-php55-process_5.5.38-175_amd64.deb
    sha:4800095141e0da339cfb9ab7fdd3a43bb768f067
  • alt-php55-pspell_5.5.38-175_amd64.deb
    sha:f787ff691230713390c12418aa83b85a46910a32
  • alt-php55-recode_5.5.38-175_amd64.deb
    sha:afa1475e31ba7afc12f162187a6bc47649e8a356
  • alt-php55-snmp_5.5.38-175_amd64.deb
    sha:cf82618f5f29855b08bf6410fb44195f087eccde
  • alt-php55-soap_5.5.38-175_amd64.deb
    sha:a5d553bc392380ae58057e8763ea615f43258159
  • alt-php55-sybase_5.5.38-175_amd64.deb
    sha:c99bb5372e92c5d7d62bdf5ca52e945a086a101f
  • alt-php55-tidy_5.5.38-175_amd64.deb
    sha:096b46c4564173556f1469053e514e20207fb471
  • alt-php55-xml_5.5.38-175_amd64.deb
    sha:394973174c8a243d4cbe1c529ab8b34573603c3e
  • alt-php55-xmlrpc_5.5.38-175_amd64.deb
    sha:fd15a26738d48c4a772918c17696e3e938d06d9f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.