[CLSA-2026:1786106430] alt-php82: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-07 12:40:43 UTC
Description:
- CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place - CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
Updated packages:
  • alt-php82-8.2.32-5.el7.x86_64.rpm
    sha:a311b4706d0d34547b85aceed9e28e0dd77c9b2a446c2092e7bf42e91a5ddd07
  • alt-php82-bcmath-8.2.32-5.el7.x86_64.rpm
    sha:f8c57bf5ed8949f7aa4dd7c6c2aa37eef34527f450545bb4df6367e8367db87c
  • alt-php82-cli-8.2.32-5.el7.x86_64.rpm
    sha:7bce878b550ff763c93dfa157f9762ecf73063a1a5f46294e88b365a11a6c288
  • alt-php82-common-8.2.32-5.el7.x86_64.rpm
    sha:99a1cb1bf655d399ecff3e5ee5d4c98b7da8ec5f512afebfb00b03d9009296ac
  • alt-php82-dba-8.2.32-5.el7.x86_64.rpm
    sha:c2b24c1ebcec5480b6a58de9de27bed11977ee8e707d21717632ad04e9ad7c4d
  • alt-php82-devel-8.2.32-5.el7.x86_64.rpm
    sha:7e50d4f4fc13c934bf88a4ca647403d4e378f8a535020468ffaf61eff6c9e32b
  • alt-php82-enchant-8.2.32-5.el7.x86_64.rpm
    sha:6a2a35df99fe23e8f7e045ec292a3f1182ea58f93294d00de796c9c37c4ebedd
  • alt-php82-firebird-8.2.32-5.el7.x86_64.rpm
    sha:e3b360b35ea54f1990ee88681f080868646440c28a642b693f4af20b03937a00
  • alt-php82-gd-8.2.32-5.el7.x86_64.rpm
    sha:f46279a2fb382fc50f7a2b38dd7b5b236c10d6bc6a593d90bef38d7f8dbfdc38
  • alt-php82-gmp-8.2.32-5.el7.x86_64.rpm
    sha:aee9301ff873d11339d5de37e0e7b0b3832bac09ecd7858d65edb1035a867a3f
  • alt-php82-imap-8.2.32-5.el7.x86_64.rpm
    sha:93600926a37245992baee6ac49366e705d8517b4f0b8ffa05fb06868b1ab63ee
  • alt-php82-intl-8.2.32-5.el7.x86_64.rpm
    sha:1a168ea549136f29510624a4e2d11bdf6d54c77681a9567a0aba2facc6358b5a
  • alt-php82-ldap-8.2.32-5.el7.x86_64.rpm
    sha:e21dcda0969d71bcd9b28932699325d49c971426f52b27b16a99e55f30394067
  • alt-php82-mbstring-8.2.32-5.el7.x86_64.rpm
    sha:f94f14e2be2e1695892ae2c55f74710b01717f28527d4e652bb56c592b7529ff
  • alt-php82-mysqlnd-8.2.32-5.el7.x86_64.rpm
    sha:70db5001a82f32f9c5f5dddc034052cf93dd1c6833fce1db7fa7386c4d48f8a0
  • alt-php82-odbc-8.2.32-5.el7.x86_64.rpm
    sha:6c9be185ad4421f7109b19d30f1bcf109b9a5a49194bbad0f4a109402bdbcd7a
  • alt-php82-opcache-8.2.32-5.el7.x86_64.rpm
    sha:cb5297893f428faf4ebca06c0da228eb85c454ee6f7bd56fb686ad183a077a1a
  • alt-php82-pdo-8.2.32-5.el7.x86_64.rpm
    sha:99374f9cf29315dcd68a876c62a3de18938b6d3b93dd8f8c470214e6f1a32adc
  • alt-php82-pgsql-8.2.32-5.el7.x86_64.rpm
    sha:40e92c367af7c1df2bfabc5f30727435d839f59321ef8af68f3b61cbf700b820
  • alt-php82-php-fpm-8.2.32-5.el7.x86_64.rpm
    sha:6f7fa5c7fef40ede51333bf31741943a25b91f2433efea283d79ae3f395a513a
  • alt-php82-process-8.2.32-5.el7.x86_64.rpm
    sha:142132aeb52b97661b93669e6ed213493c80eb0ab7ff6ffb6614395ce575a5f6
  • alt-php82-pspell-8.2.32-5.el7.x86_64.rpm
    sha:2afcfcc1d225c8c68ad28a9b83979c16db1535ab745290e17600e055d9e4803c
  • alt-php82-snmp-8.2.32-5.el7.x86_64.rpm
    sha:94559395da09990b8ca1c0d4394cb05b572c10b78b5040cd5288309a0f1b5df5
  • alt-php82-soap-8.2.32-5.el7.x86_64.rpm
    sha:ae29f6c112419a7297a34b84bbd60cfedbcd0c09b4bd749966ffa621b3ecb8d1
  • alt-php82-sodium-8.2.32-5.el7.x86_64.rpm
    sha:03c39d4b468009077424efea2fc8e84d1c8d6a54e6f43e0aed2c780595996b86
  • alt-php82-tidy-8.2.32-5.el7.x86_64.rpm
    sha:7a0c947c1c4d70d4ab5657ed4667bd717795a28e8f41640e178875ae0d4f73dc
  • alt-php82-xml-8.2.32-5.el7.x86_64.rpm
    sha:f307867f3a4190f8cce1134e507cb172708692aca8aa69d6681969d9348babac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.