[CLSA-2026:1786008739] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-06 09:32:36 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:c91338a42386e9ff75068368f2af1a329d096570
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:8750c5071c0e736bcf198c4bdfbfebdce5d01e2e
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:7ca984326a468094b18ad0a2df369ba8ffb6820b
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:8969537997e3233515a8061e9b17665821544870
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:1edbcc06af655dc43e6dc80cc95948142ebd5b00
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:e938fe9df99d887e64fd712e944f02128589e118
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:38792bc07dbbb874ae857a71e54d07eca55e3d24
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:8eabb4e9b96965d0849e308b6e87f9a9c4f152c0
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:3a077851a0e3ccfa4ae13065a2aee7c139a27427
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:aabf73587f1414a6738733f81c79bad2c08f9924
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:82058ac1daf97f01fd72f2225b6b55c33cf88733
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:a61b20dbdd0903917c89b003d76c43a89542e2c6
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:3759d47736f74487bd5fd2f7c8c81eb2272af4f1
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:5e04da175008829a9f3d60b03964b2948bcc0379
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:c3d2a17f086309e0c591a555aa424a98d171aa8c
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:87dc21a7782f41e0c6be10cc356e3adec9712c2a
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:02e16c920b544e37cf9d770d43d79d4e25e169f7
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:be95e2ecc26f55725baf9c4f029b7096f99db514
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:d398fd52e2e9597a0110eb14971acf15eb207159
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:d4df171f3e5abd073161bc3c6596a2c2a8d39470
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:e5476caea7c5c4c624675eac84bf015d2292adb4
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:a783fad5c34eeaae11b0b9639fb124fafdd1fc36
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:e0ada1b51a5f09492bbb34edf7c68a7c30d3ec86
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:05a106948e443d3f5af79dbed6404044f467e57e
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:7651e02240c28521e1be6dd939a99e949c3b0919
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.