[CLSA-2026:1786012439] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-06 10:34:26 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:c5aae71938230e72051f402a918293ccf4e5c4f0
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:6db56f2ee5cc09ccb601d264ae5bad3e11d3be9f
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:7b796d300d4aba19be0b4cf6b4cadebc633fffba
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:cb3db7e0f27f53796a1b0c3ccf06d8adcc3a8f11
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:37f7c85c12b15c9a6ef737b6298f6217a2dbbbea
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:03c0429359c86424bb32bc449ca27dd76f9f0095
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:f60c54d8380e9cb7b4c9ecb6ead92d1299ed6b7e
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:21fc10ff962d70b5f26aa3796b9c83e1d71aa50e
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:a03439cf53fa03eca5674b5b93fa2769b7d2d8d0
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:de6526f751d271f9b867645aa624e7c0a00e731a
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:16d1125522ce1278940a6c970eb5877b3c288728
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:4c65ffc08fdcaed68d290068bb622598b0d9cc0a
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:1787a432945f0c5516c208b612cea38505be946c
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:7b3085b7f2fa98ed462b4242c7eb4cbad57d97d4
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:e4659d5d2aaa5474ad3ca284e3b9f3252bcbaa2a
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:887ed317104eced67c6341c746b58bfd8c6564b6
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:20abef7f5d30e5b1aac65eb40bf8e26b6ca01794
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:afca35ce646db0ab43aa51d5d3ddf09c8260899c
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:463004f74ff3d8091bd7be1748d0dcb42e1b17d5
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:b2c21b14013b575e00a3b5c2447a167dac08e521
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:9c1f65f66fd460ca88ab16aedf5c093c33c94cae
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:5f30ce61d494d479bf100320c9f0236fe2b16eba
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:a4d754d04adf33c04bc2f4ad42d4caab01dcfa02
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:729ba4cc1cccf30b8b8b7d09d3458c14422a7fc2
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:b2996dd40a90b74175d8a9d44dc7a45f0f40e590
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:fa65c932359978d81e623604e93c002407c6c372
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.