[CLSA-2026:1788337150] Fix of 28 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-02 08:19:47 UTC
Description:
* SECURITY UPDATE: ext/pgsql and ext/pdo_pgsql ignored libpq escaping errors - debian/patches/php-7.1-CVE-2025-1735.patch: backport upstream commit 9376aeef9f in ext/pgsql/pgsql.c and ext/pdo_pgsql/pgsql_driver.c. PQescapeStringConn() was always called with a NULL error out-parameter and the pointers returned by PQescapeByteaConn() and PQescapeIdentifier() were used without a NULL check, so input libpq refused to escape - for example bytes that are invalid in the connection's client encoding - was still built into a query, or the NULL was dereferenced. pg_escape_string(), pg_escape_bytea(), php_pgsql_meta_data(), php_pgsql_convert(), build_tablename(), php_pgsql_insert(), build_assignment_string() and pgsql_handle_quoter() now propagate the failure to their callers. - CVE-2025-1735
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-107_amd64.deb
    sha:075ca71e79aab9a346d788b50a1423ae8441274b
  • alt-php71-bcmath_7.1.33-107_amd64.deb
    sha:9fcdf2a1978d1ad592ee57df4767564ef0e96f92
  • alt-php71-cli_7.1.33-107_amd64.deb
    sha:b84c35a9207aaa8d1f615466ea4773e905131300
  • alt-php71-common_7.1.33-107_amd64.deb
    sha:b0bf926433d3dc025b6025c60de78398c0b7023e
  • alt-php71-dba_7.1.33-107_amd64.deb
    sha:ff6817582a0d247d0e0b191d0626648b2c79c5e6
  • alt-php71-dev_7.1.33-107_amd64.deb
    sha:5d94674d6b958fed1780339a9d218ac33d9061be
  • alt-php71-enchant_7.1.33-107_amd64.deb
    sha:f2433ac92de0dd94d362babd122cac4a04704555
  • alt-php71-firebird_7.1.33-107_amd64.deb
    sha:a9f045c0591a52f831ad16acf08fb5525283b4eb
  • alt-php71-gd_7.1.33-107_amd64.deb
    sha:bd94a347c4d69484b5398cc8b4acf1579e22dd10
  • alt-php71-imap_7.1.33-107_amd64.deb
    sha:53bf030b47c84c3f6b2344c20348f83d218e1662
  • alt-php71-intl_7.1.33-107_amd64.deb
    sha:82bcae965529a452cc54e6078af0eee7b5d40203
  • alt-php71-ldap_7.1.33-107_amd64.deb
    sha:49c2796e2b7e4adb1523acb629ec3865a6189a30
  • alt-php71-mbstring_7.1.33-107_amd64.deb
    sha:e9a6371569a66218d48d040c84f873c5fbde6ffa
  • alt-php71-mcrypt_7.1.33-107_amd64.deb
    sha:620a2664fc1b27c9f5870b4311b2ecfaf8703ad3
  • alt-php71-mysqlnd_7.1.33-107_amd64.deb
    sha:6778b5612e6f489f7f5e78808630a9182e78cc07
  • alt-php71-odbc_7.1.33-107_amd64.deb
    sha:8339e3c8182ac1f7d38ebb2f111d013a6eb7b115
  • alt-php71-opcache_7.1.33-107_amd64.deb
    sha:15da6485652a083273e3967c5daf587b4211c96b
  • alt-php71-pdo_7.1.33-107_amd64.deb
    sha:3d99a311e814d48bfdbce7ff231292c8175ce22c
  • alt-php71-pgsql_7.1.33-107_amd64.deb
    sha:304fa48e932e65fcc7473a681b98503ef3d70c98
  • alt-php71-php-fpm_7.1.33-107_amd64.deb
    sha:c5dcf09691b1ab1383a86fbdbcc2bb9b722d0651
  • alt-php71-process_7.1.33-107_amd64.deb
    sha:a84b6232da55c9938a2e792fa6d55768c2014d76
  • alt-php71-pspell_7.1.33-107_amd64.deb
    sha:951a00510b39d9808436006c1ee9702a83db31e7
  • alt-php71-recode_7.1.33-107_amd64.deb
    sha:668af5c086bf315a09b9d8b36ab1f92a1415d12d
  • alt-php71-snmp_7.1.33-107_amd64.deb
    sha:b4a73fdeeb2e7c9bc2ecb24015cb85e1de69eeb3
  • alt-php71-soap_7.1.33-107_amd64.deb
    sha:d656b0c7711c04dc6da91cfd59450e65b4c46d06
  • alt-php71-tidy_7.1.33-107_amd64.deb
    sha:1041ee0d7359de2423bdb922582a17fa11222a7f
  • alt-php71-xml_7.1.33-107_amd64.deb
    sha:0bebc3bcb53e2009ba0cf553f4eff23cee26e72b
  • alt-php71-xmlrpc_7.1.33-107_amd64.deb
    sha:25622313f631e865c08a26b0eeb396542f5a5ba1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.