[CLSA-2026:1786525141] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-12 08:59:11 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:59c7230dff086728eb3e1324208506ac1e3a3622
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:7332c1202002b1f876f94205f5905e52e1ccc048
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:a767dba67b5d3de02bedd9a8044bad9f91a26104
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:a98ffe5a64ae28299d35ea2b887e7fccf76c492a
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:d0a9382fde3614de251d4a05a1b465a64ee813fb
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:b9e94a2d0d51f81d3a300c87835c1239c6e5f532
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:f631ac69311445eca35efb0b73715dcbb9c39e0c
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:2da0e545348d82d1b463587c2001135e7fc1940e
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:1588dc0346fd5a95060beccf7704002861342a6d
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:665baf411a8ef9ab32d9267c06f3af4cdd2d958b
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:2153817b9cd2d5ebcd55567ba77abd135a83aba5
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:295bfc0a18668c2db3be280bbbd6840e30a2566d
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:41ef519f92ef7706a38959c958d52c685ee013a3
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:10c5e8cdb605596dc70ea5be7b0931194e253864
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:e8b71d13b3182b9fe5edb68f454857e864847f7e
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:a0e8bf47209c24c54950084444e279d934fc10f5
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:7c0bc735fa2f2cf3ec466c174cff7091012452a7
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:8aaf263331f88bc9f0746ce5a669fa17b452c295
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:2f2b1a0eb308e5ac32f99df1b9ab8ca5847889c9
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:fd21e03b6b09784481ffc9c9434b05362d473e0d
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:6e8d4caa4f327e3177526e66287870c14055597f
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:9dbd55774a5f1f07a4d3da09d3c03b1a773a93c9
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:deae523a38b21858d7202a3c701469d4cac1b094
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:79a5dbbb0a912d610de9f8ad61dd5d6c1f4db276
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:c8b6361dbab72cd8203d62f9414152e9f83d82dd
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:72160c9eb7e886c6d4237b459f27e09dd9de5125
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.