[CLSA-2026:1786104943] alt-php82: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-07 12:15:55 UTC
Description:
- CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place - CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
Updated packages:
  • alt-php82-8.2.32-5.el8.x86_64.rpm
    sha:9105a7bbf27bc60c39d86d41c182e52bfc6f35f056578f6c35eb0c2df14fbcbd
  • alt-php82-bcmath-8.2.32-5.el8.x86_64.rpm
    sha:f212a76e7b1127356722fe03e404b2041aba34967e5a9dfd40213737b5ac3cae
  • alt-php82-cli-8.2.32-5.el8.x86_64.rpm
    sha:fc7ad545d48f569cd235161eb9aaca01af5ecf39575ee5fb116cb94a9215cfb0
  • alt-php82-common-8.2.32-5.el8.x86_64.rpm
    sha:5e332c126d4ddafd56350b3d9cb00fb19773cbadce9ac96c6ac3f41e4f86c32f
  • alt-php82-dba-8.2.32-5.el8.x86_64.rpm
    sha:f72a1599b796c72be4e8272cefdb2f624a1e46bc107bf2ad5e86ca02f6c7201a
  • alt-php82-devel-8.2.32-5.el8.x86_64.rpm
    sha:f1828359794b26868d241470d4fbafe421ce1dc0a22aafc3aa70811e04a85e01
  • alt-php82-enchant-8.2.32-5.el8.x86_64.rpm
    sha:6dac8d8f7351f1355e3f76a80c94c5857b0372a89d36fe9359a377760a951712
  • alt-php82-firebird-8.2.32-5.el8.x86_64.rpm
    sha:f8f6fab51dccae4953e3c53e93e45cbb80efdfddb844568800604016e0065c77
  • alt-php82-gd-8.2.32-5.el8.x86_64.rpm
    sha:91e2feeca311fa376b343f15347f88cbbf2dd8ddba5ac34655a49d93d463d2a8
  • alt-php82-gmp-8.2.32-5.el8.x86_64.rpm
    sha:8ba5f4f7c0e455537deb9a6193647df3a786305bcbb02aea42280c204b589247
  • alt-php82-imap-8.2.32-5.el8.x86_64.rpm
    sha:110f820bcbb901fcf9799c781eb1094e0d4a968c4f70163a63b5c238413ba376
  • alt-php82-intl-8.2.32-5.el8.x86_64.rpm
    sha:5c73b1d38b622810ac58261e4b4ad119d9717952dd3afe31b12762a19c1c8c42
  • alt-php82-ldap-8.2.32-5.el8.x86_64.rpm
    sha:34d24c8aa282afe86bb1a1975b36319e696085f230e019d90d9c1480f369b571
  • alt-php82-mbstring-8.2.32-5.el8.x86_64.rpm
    sha:094aa7373127fa3e16948b6f2f7942dccce1cc21de05f8b08c4d8f87d3a1a69e
  • alt-php82-mysqlnd-8.2.32-5.el8.x86_64.rpm
    sha:042ab40347bd0def594eddd7626a3c87f7738d4b001e99325334f1ff88331cd2
  • alt-php82-odbc-8.2.32-5.el8.x86_64.rpm
    sha:73316e52602f1798e008f8ae9ec21d8e31679513b75f8d9ec1caae05340104ef
  • alt-php82-opcache-8.2.32-5.el8.x86_64.rpm
    sha:593d6d8f546ad100f9936fbc533749cb5c639e7c3d18ce5b65011b2cb84cf096
  • alt-php82-pdo-8.2.32-5.el8.x86_64.rpm
    sha:eb4ba7c675895f68390f321be8a40f9c244987c18c1e922ac8c27df338e21b14
  • alt-php82-pgsql-8.2.32-5.el8.x86_64.rpm
    sha:172ed48fa16d68720c3ca57b7928e8fba456c06f293ddf029a53e2d906cf6b30
  • alt-php82-php-fpm-8.2.32-5.el8.x86_64.rpm
    sha:24122a5c6f0aea33c6159b7d484649d5174c14d8d38a58bab5e7db5e5a9b1dc0
  • alt-php82-process-8.2.32-5.el8.x86_64.rpm
    sha:8ce4519722b99b036aa2fecc3fdb09763ff76f034deead47263cfd693d0c68c4
  • alt-php82-pspell-8.2.32-5.el8.x86_64.rpm
    sha:93d6780628b5e1a3b3995ad8749fe1cf8582311ecd206420b8057a8ed0a5f00a
  • alt-php82-snmp-8.2.32-5.el8.x86_64.rpm
    sha:1129d81d5633ffbc3035442645f09c9514f58e58340689d5547c4b200c0a8514
  • alt-php82-soap-8.2.32-5.el8.x86_64.rpm
    sha:dcb7bae8455e72ae0c38de17fcaab614e1b3ba2d8767071b8be98abfcfb7a56b
  • alt-php82-sodium-8.2.32-5.el8.x86_64.rpm
    sha:b65cbfdb30c33ac69eddfa0acd9589f5142458dab341bb09a6fb2a1aa0aa1326
  • alt-php82-tidy-8.2.32-5.el8.x86_64.rpm
    sha:2c69ec967c6bf10b8357b570f27c6a3110904dbca5938dc6778e66fde8bba259
  • alt-php82-xml-8.2.32-5.el8.x86_64.rpm
    sha:3aee73adccbc7435465c7bba4af5be4889cac4583553706d0e09b63e2ecc181e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.