[CLSA-2026:1786009979] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-06 09:53:15 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:58beb60516ca9953afa5fd76e37c57a13eabc728
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:0adb3febd2875e202024325d58c1921056dfdc2f
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:5ef5debbb69d77d7ac2b0990e17ba90a7f65ae5b
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:a2a67a0f88339f2cd42d47fb4e93e27b69ab6807
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:fa171d7b3c6d86983532f6f0197f476878c77a69
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:5684d2d202a238f8d88ceb1630149878fe3c7dbf
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:11d3e41b6527c91941001ea59dff4cb467e92b10
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:020017589f07b650a0df24dc20a95c089e3aa397
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:db18a0727482d698708cec22f84b91b91ab61742
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:9c56233aa0f3a53ccd6a1f2f66399de028b24bf9
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:92be4506aee45b054adb5b2ae1b65f37ea69cbdc
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:22f4c8a3b53963e8647576de788220e52d7ddce3
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:a6b13b37cfdb44be6d7f5b16815edb57a6916a8b
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:5448499233efa849a96f6cc7742e40821c463205
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:16870ea199a918b292c95257ed95c63f1c1e659c
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:9b867df58e3753eb2c6783a23a3ae7fa5342f677
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:c3c80ff4a80d52296fe623ad657866be81c6b6e1
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:08c41fc72d4113c49cbf7bafc2d461890b2d3622
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:0391cf4c2cb21f7dce4ffe5f540b998f0462e4e2
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:c704ee01afa8f353e3f58193f00656ee2978e4c8
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:10cae7876f9755a475daa35e8d655d38da67c493
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:f7e4c7b3293c8c53daf1293b6b222c09a841102d
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:783d41cb18220a631afb7ca52ec41e065910208f
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:7e3db127d2a2cbadacf11bd12c75868143f32197
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:0b2fbe4d9dd54249befdbb7049031ed8cf0fae5b
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:f54edb73b490395f4ed7417fa44daa27de2a66fd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.