[CLSA-2026:1786377146] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 15:52:58 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:59c7230dff086728eb3e1324208506ac1e3a3622
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:b34acdc14dd38c06048359ab70498accec950039
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:eee2813d3f88cfa9d87c5dfadf7bfdd002dcf5c4
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:241005ffad8ae17b28c6458e16fe1186cf16e266
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:ffd946e9c7834e94cdebb838394856e9300bad94
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:cd5e62fb838c5241064eb7fdde4cbe678ca91ab5
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:5cabc970e6299a5c148dd43de1c81dd377856948
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:b859ee78cf9ff58a37d31aceedb8fff17935758c
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:c0781b75ffd7195c24d8da256a371f3125e4899a
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:6dc1ab197fd7f65b41456097ee0850009c1aa07b
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:597c492a028448298f9fbccc2c7fa158e398a7bc
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:7827f047f6ac07eea851bb3facfba065a90e6745
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:9b4cbbff9e441e2a518b4a4f7538c1908251fc07
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:5b24ce22c8441ee01e68cf38352ad3999c98eed2
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:376fca418a96aee5be5260bc441b5f00fb2fd502
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:0641aa804c5cc9b7eff1753bc0c61eb2b35c8108
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:6d6bac56206c65147e0dc53dea21a00eb7e97620
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:83387f07d2bbb85537b2a529513be5c64cefc55f
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:b68096d72ec5bf36e6a127e18b86c696d1d3499a
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:d4ab09f16dcbf7e1e12d52485b8461ca24822d1e
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:542735460f2f7b56fc4a1c729ef77fee2abdbcb1
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:7d327e1fb61771de6565588be9ea383a4733f8f1
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:a24951b77dbfb44e2ff5567aa0682f2d058a3809
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:9143170112c21ef50640ffd1da795d85cd63c5bd
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:076ddfae4ec5a7390c71d2dc3493ade66e24471b
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:8a1abe9c2753f1daf3fe0af8dd36eb7a7227bcd9
  • alt-php82_8.2.32-7_arm64.deb
    sha:9d6319b8d63ce45bd7bddced9465552b4b6eb746
  • alt-php82-bcmath_8.2.32-7_arm64.deb
    sha:d93eb9a3867c1533041771c5085d671df119ef68
  • alt-php82-cli_8.2.32-7_arm64.deb
    sha:dad7c2e7db1652a66692a3fb4d57eee73637963c
  • alt-php82-common_8.2.32-7_arm64.deb
    sha:89be4f490d38a71bb8d062088a9f3adbb246cd52
  • alt-php82-dba_8.2.32-7_arm64.deb
    sha:313dd155845ac99f05a9e96b98cac4e300582799
  • alt-php82-dev_8.2.32-7_arm64.deb
    sha:085cda4fdc6341e56d04e6075221b89d367c3340
  • alt-php82-enchant_8.2.32-7_arm64.deb
    sha:fc0c670bc0d7315f1934538db18eb0d5eb27f4e0
  • alt-php82-firebird_8.2.32-7_arm64.deb
    sha:473ea7b6af15ea281598200cfa6cd778696b5034
  • alt-php82-gd_8.2.32-7_arm64.deb
    sha:fc76356341543553116e63546ecf0458870bea73
  • alt-php82-imap_8.2.32-7_arm64.deb
    sha:ff293eab8c550db500c3c2224589ee5c1a309d47
  • alt-php82-intl_8.2.32-7_arm64.deb
    sha:ec8c736558117ccbb93bdc47a70998502ab5d4e9
  • alt-php82-ldap_8.2.32-7_arm64.deb
    sha:e71c9e77aa9f1f3c46696d7025b8d94deec00ebb
  • alt-php82-mbstring_8.2.32-7_arm64.deb
    sha:8e447bfdf5f117f6496c57fc306894bbe46213bb
  • alt-php82-mysqlnd_8.2.32-7_arm64.deb
    sha:cee2b4a71c1f12e667344ff12a08b8604517ad3c
  • alt-php82-odbc_8.2.32-7_arm64.deb
    sha:a96de6ca75fd0bb7a4ffd8dc15e04518a6d96f44
  • alt-php82-opcache_8.2.32-7_arm64.deb
    sha:a4291f877df3eab1c325847171cd7d9c5aaf0120
  • alt-php82-pdo_8.2.32-7_arm64.deb
    sha:75cbd0489c5ea62f868d5c5aace1f02cb09facbd
  • alt-php82-pgsql_8.2.32-7_arm64.deb
    sha:078d52a121331cc4c1af1175e9a608cc1ffbe3a2
  • alt-php82-php-fpm_8.2.32-7_arm64.deb
    sha:3a7a9f10ca8331f0d7bee617e57ab1d1aa73ebd6
  • alt-php82-process_8.2.32-7_arm64.deb
    sha:074031c0d3ecf5732ce12f988d5e6828d506208e
  • alt-php82-pspell_8.2.32-7_arm64.deb
    sha:2bc9c8e5ef083167db0b0e94bfa750e5a8367e3f
  • alt-php82-snmp_8.2.32-7_arm64.deb
    sha:02e7284dd8b75e5ff7c7cb168ff0b6bb942b99a9
  • alt-php82-soap_8.2.32-7_arm64.deb
    sha:29fe0acb3f42a9f2354894580ff58550efea514f
  • alt-php82-sodium_8.2.32-7_arm64.deb
    sha:cbadb6654fa12cd105a7d1a17feeea7ac00010a6
  • alt-php82-tidy_8.2.32-7_arm64.deb
    sha:061337e28fae8968310f4dcd05e9cd73d3ed7e9a
  • alt-php82-xml_8.2.32-7_arm64.deb
    sha:3fd4449d29e29457c3402d86c19fbd3c4ad0b2af
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.