[CLSA-2026:1786378632] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 16:17:41 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:59c7230dff086728eb3e1324208506ac1e3a3622
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:0839d7615233a6bb054dbe65ba5291913a90bba8
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:1b029c281b05fea068dd350e66d8a67282365e91
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:59bea8e0f4fa78bef33547605353af9a4dc6b59e
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:aa4dc9af0e81180d7a974a1c5524c2692bdf0969
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:f980087884966ad9cad638c0d3461bdc8da52788
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:136dac668c082f221718faf9c9201f0defcc63d9
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:669bbcdc42ed79810d7c464a63f1c67cae84aefd
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:b1934f76422e8e4a076e331132aaed9bb3d6b305
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:0ec3d683aec4a06bc6a513f32f103e82f861c491
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:d0aaf95fd028f6c673e4c8be46910dd31adb7235
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:e72f5e704e900f0b0a5165002a7f42f9f72d8f8b
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:7d49b646924728a3207fb12bd04da31466fe346c
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:4c1ec8abdd559f6fa6427b652d6dd41acfbe76e8
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:670bcfdc21dfd7683479ff7c1923800306fe930b
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:d7a4694cc431d298be61c349bc5bec7035e8a54f
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:73a272de1d734bb2a324e31e61d42550232d2179
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:ccae687f9ad33ef6f9736ec257fa42addc81a6ae
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:1ed2ad1545913fb19476371e96bd17b50a844fdc
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:af92238847dd4fe6aeed0848534c49efb8794773
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:4a239baffea4b09320015ae10e435f5668f45b33
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:a0b2938b5388fec6eca1d9b9a5285a3b24f6e4a1
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:1ba6e5556b24ca1da488f0f6eb64ea29a3fd5f07
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:2eae3e3e9ada9112ea7f36b0431b2ea2852f8a5a
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:424f91a209fb19d943924c155dbb876d79e6a80c
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:f66b864432a043da70bb933adc65245e5a8054ef
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.