[CLSA-2026:1786516713] Fix CVE(s): CVE-2026-17543, CVE-2026-7260
Type:
security
Severity:
Critical
Release date:
2026-08-12 06:38:45 UTC
Description:
* CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place * CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
CVEs fixed:
Updated packages:
  • alt-php82_8.2.32-7_amd64.deb
    sha:e206e44688cc1d09ced9597628609c4e9221eafb
  • alt-php82-bcmath_8.2.32-7_amd64.deb
    sha:852e76e0e772ef7692e5ca2c4f61acd91e09e086
  • alt-php82-cli_8.2.32-7_amd64.deb
    sha:fd123e7cf7d7770223d978694d9990b4f91a9979
  • alt-php82-common_8.2.32-7_amd64.deb
    sha:e241ef3ef626ffe6b6bd0664cbb3b24b5a74f4a4
  • alt-php82-dba_8.2.32-7_amd64.deb
    sha:316a2ef5a16862570ec4434ff14fff5977cd00d0
  • alt-php82-dev_8.2.32-7_amd64.deb
    sha:7c120b96ac73bbae4b5c5967e5ddea7e6c58faac
  • alt-php82-enchant_8.2.32-7_amd64.deb
    sha:7694798dfd3db196be674ba1346cba343e07308f
  • alt-php82-firebird_8.2.32-7_amd64.deb
    sha:aca2b9de2f807cc3548f0c4d3577aaaac3e741fd
  • alt-php82-gd_8.2.32-7_amd64.deb
    sha:52ea987eff7f939be6da8078e36802812057cb47
  • alt-php82-imap_8.2.32-7_amd64.deb
    sha:e111ad713ea97a3310b45bd45cbcb7d4f0ee98c4
  • alt-php82-intl_8.2.32-7_amd64.deb
    sha:10488ace942fa41aba7089e020918aa644926b82
  • alt-php82-ldap_8.2.32-7_amd64.deb
    sha:1d1b5d146d89f01c96931884f6385825151be361
  • alt-php82-mbstring_8.2.32-7_amd64.deb
    sha:49208c061b01e6d15df8e85a4058b44d6959b3d5
  • alt-php82-mysqlnd_8.2.32-7_amd64.deb
    sha:49e2a9436aa519801225ce8706aed3ae39123c4d
  • alt-php82-odbc_8.2.32-7_amd64.deb
    sha:0d7e880f871e1323edc7281107549bb224209af9
  • alt-php82-opcache_8.2.32-7_amd64.deb
    sha:75763f390ef4b672185cd8e6e90db83e1966f077
  • alt-php82-pdo_8.2.32-7_amd64.deb
    sha:bb997382ac396bc804a2ec204618dcf7a8b7fd21
  • alt-php82-pgsql_8.2.32-7_amd64.deb
    sha:935bb69ffad80c7fbc5ef92afbb31b1ca81ef86f
  • alt-php82-php-fpm_8.2.32-7_amd64.deb
    sha:a66eee559100c66773f24a13580ef59bbe3dfcdd
  • alt-php82-process_8.2.32-7_amd64.deb
    sha:48658e93c0296eb0d8c1ca09213f99bdd60a47e6
  • alt-php82-pspell_8.2.32-7_amd64.deb
    sha:a91cac4580f2c0995fd2b39be8b70444b67c5967
  • alt-php82-snmp_8.2.32-7_amd64.deb
    sha:61318f0a8fa4084974de3ed9d4071b388d623f45
  • alt-php82-soap_8.2.32-7_amd64.deb
    sha:0c85ec9a864dba2a59695851fc4afe4951d43668
  • alt-php82-sodium_8.2.32-7_amd64.deb
    sha:ab7c5ac2436311920afba72844b21e345cc1decf
  • alt-php82-tidy_8.2.32-7_amd64.deb
    sha:9e8a83b4e4b674e5636b440f32b1e27a5582efef
  • alt-php82-xml_8.2.32-7_amd64.deb
    sha:476eaa9a34e59328ed5c13709d63339c6b0f6314
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.