[CLSA-2026:1786011165] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-06 10:13:05 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:58beb60516ca9953afa5fd76e37c57a13eabc728
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:6534771eacbb483e2759d3658bd7f684ea30c36b
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:d64d0efe34e023f99609ba4be6cd4e1ee1a5bd00
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:526b6bcf501f8eb8012bcb0af4884fca868aae3e
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:bc2d17a28e0b55dccab1e1842d5602feaa944fa4
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:38ab1ab6636fc2a8f86330b6372640171b357fa1
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:a25793a2446f7d67200453d309b89f128f487376
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:8df3f6af40ea96bbbc7afd1d374f2f5177ecdfc9
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:ed1b4b5d96e84f0aea4771cbb1c49d33469468ba
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:f9d6e438e199e8c23d86aa20170711d290ebef2a
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:e327674f2b00d59761a8b733b296caaf9ba7ad90
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:f9d9058a15fd7c50ecbcf98f2abee8440b5ab429
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:e57a599a54ea61695a6cfff8116c9d16bdd01f16
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:9af77ffdd85197e85aca63da59dd823c5fea5d15
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:188f871f10dd724e4868493ad5af54fa3d858600
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:f438cdceab43c9e111329a59499c8aba199472e9
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:396bb890c857910d82658da1924880b99bd90c38
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:6ea29abfbdc9abea82330b3295dd8804e7d87b43
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:7abd8a6bbc587201897f8a9003871a6ad7b627b2
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:6dea2575c2fa861adbbfa8a5f39ad103aa2caa51
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:f62e8b0a3507f852e75a8295bd278fc36117e667
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:9a74844e31fbe4f094fe365d8aee1ee8ddf4deb6
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:b84a4b47e0c0a0614a74aa00d10dd379be486c13
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:d7ac5ef80fad746504a057d67a59dfc3ecd81af0
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:7f7d322a50f469701c680726f5cda68eebaf412a
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:c797432587a13ed6747d645891bd35a4815c0b4d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.