[CLSA-2026:1786376270] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-10 15:38:23 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:59c7230dff086728eb3e1324208506ac1e3a3622
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:7a764b4d9c43c631d1af05de322a0ee593889eea
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:41f9f0be852687b834398a3761f1d8906f927320
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:83b242e2de20bfe472a0e0523f231553b3aca6ef
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:282362426c0a0d98097ee2f3a22b9048eee3c3e8
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:a5442311270e264e349d5976e293ba0d08229be5
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:fc1b40553499f4f00748f6bf88c48ac6fb2dc0ad
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:3a682fa8f9ae41fab5f100bb84e49f8bd7f4ad75
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:ecf23d9cbfe85329735c8f5e6f3c3c860f248d30
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:36bd97f968e5d406bc5a28144f7ee86a4dfbd693
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:9a172e35a3e8613bdb95372dc5190d8bd7353135
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:33b24234ad27658102fb5f6ddd5ecc720f93b26e
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:a5c0b2cef7d058391a3d09c5f1a5673dd149292d
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:4f02607a96129d99f6ec0926afedde6508d8d3b2
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:06ae2548d28259bbe4826f63e748cdaaf75a8d34
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:04320ad75577156235afc0c2e90188039ddb2b13
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:83c55b8f6de7083e47d5314730e065101f62b8df
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:b726761f312be1a4add227819edb2e6ec6deb5aa
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:1a84e5acfaedb8ce79df5d6909beee9530eff9e1
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:b574ec154cb3ae76447e174a3a7d25d4a399cc2b
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:7b044f9dee0a4b3693ee63952a52abf333768d93
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:ac175e313c0dad16318e5d86c2655f4b9476d491
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:1549ce1c5d0f49b216429c424c080a4842fba019
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:d964f19cbe48d1807227e1ae47541b927c615bdd
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:f681354888bf23c75908a25ffae5504ea0abac53
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:0b7daf0224620507a0415fb2402e616df9da0d3a
  • alt-php82_8.2.32-7_arm64.deb
    sha:9d6319b8d63ce45bd7bddced9465552b4b6eb746
  • alt-php82-bcmath_8.2.32-7_arm64.deb
    sha:b43beb64276cd341f90b1618b2e20fd7a9da4f91
  • alt-php82-cli_8.2.32-7_arm64.deb
    sha:ff60012b7076b96e591f5c6f957210b6aeb917e3
  • alt-php82-common_8.2.32-7_arm64.deb
    sha:17eb6ef1c44942902819106f5b9305d8e5ce6853
  • alt-php82-dba_8.2.32-7_arm64.deb
    sha:d429ebe70f2461f07bdbeb58cb263d512a9863cf
  • alt-php82-dev_8.2.32-7_arm64.deb
    sha:3254d097a3769c5a20fe1f78f23aaa62a2ada049
  • alt-php82-enchant_8.2.32-7_arm64.deb
    sha:3714ab319ec7fcc376e152b0eb3cd668da9caf2c
  • alt-php82-firebird_8.2.32-7_arm64.deb
    sha:bfda142fdc075653983475d8f5b05b039729edd2
  • alt-php82-gd_8.2.32-7_arm64.deb
    sha:0174b5f31180117c94f6463e79743022fc39d372
  • alt-php82-imap_8.2.32-7_arm64.deb
    sha:f97474b9e38bc6322dd1bbb70847c86c309cb49d
  • alt-php82-intl_8.2.32-7_arm64.deb
    sha:ea90352de63417862060111e6e785b5426fecb65
  • alt-php82-ldap_8.2.32-7_arm64.deb
    sha:bd4e0596411d72ff54a8b5d62b9f4ee2923de750
  • alt-php82-mbstring_8.2.32-7_arm64.deb
    sha:d054ea7c223254c1a5a7102451360e3ef41b28ee
  • alt-php82-mysqlnd_8.2.32-7_arm64.deb
    sha:f6b2a28f274c197fb9436ff84d0766fbeec5e4f7
  • alt-php82-odbc_8.2.32-7_arm64.deb
    sha:da324d5c80115690cb56aa7847b0a4ccc637b50d
  • alt-php82-opcache_8.2.32-7_arm64.deb
    sha:cce6e45eba86380aeed079e4f70afa3805f1b56d
  • alt-php82-pdo_8.2.32-7_arm64.deb
    sha:cabd4a1b22209eee7c035aa430ef7fd899253ea0
  • alt-php82-pgsql_8.2.32-7_arm64.deb
    sha:4650ee205d492d19476978f9a3665d5e71149dae
  • alt-php82-php-fpm_8.2.32-7_arm64.deb
    sha:dd9e92c9d5a00217d201dbaa274d815261876d95
  • alt-php82-process_8.2.32-7_arm64.deb
    sha:4a7e24c3987a67b1dc47eed57553b44e5ee5c389
  • alt-php82-pspell_8.2.32-7_arm64.deb
    sha:d54491908969e12efcf33859cfcf45e9766f22de
  • alt-php82-snmp_8.2.32-7_arm64.deb
    sha:077ef98ea5a77d98ad33d4d2ad981382691d979d
  • alt-php82-soap_8.2.32-7_arm64.deb
    sha:a6c56a49b922e0ea9a274bf982feaa94cc76ec5f
  • alt-php82-sodium_8.2.32-7_arm64.deb
    sha:ce5d3a4882ea621d2192f99a1f4fb5e4d553a448
  • alt-php82-tidy_8.2.32-7_arm64.deb
    sha:10f89be1f312614645a2737bfeb8bcca375752b4
  • alt-php82-xml_8.2.32-7_arm64.deb
    sha:a99ecd81266ce9cb8c70c708830e711cdb176c0d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.