[CLSA-2026:1787828310] alt-php82: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-27 10:58:42 UTC
Description:
- CVE-2026-7260: ext/phar - replace the self-recursion in phar_get_link_source() with Floyd cycle detection so circular symlinks in a tar/phar archive no longer exhaust the stack; phar_get_link_location() now restores the path separator it NUL-terminates in place - CVE-2026-17543: ext/pgsql - php_pgsql_add_quotes() no longer emits the E'' escape-string form, which let a backslash break out of the literal and inject SQL when standard_conforming_strings is on
Updated packages:
  • alt-php82-8.2.32-5.el6.x86_64.rpm
    sha:744efe7574304d751feee87a3765404dbcd2ba8af062edc019b5a1b12b9e74db
  • alt-php82-bcmath-8.2.32-5.el6.x86_64.rpm
    sha:48477cafdef67311d47925a4513f5907526bd2b38ac22c8378055b9557415b3f
  • alt-php82-cli-8.2.32-5.el6.x86_64.rpm
    sha:5fe7ba73d2930ef8b1d58723682f50f7a266ab284604120ae8cd21cd98808f6d
  • alt-php82-common-8.2.32-5.el6.x86_64.rpm
    sha:0cd4f1d065223e969d03847007328bb251b0fd42bbd522a7d29c5836d92864b4
  • alt-php82-dba-8.2.32-5.el6.x86_64.rpm
    sha:139ed2069a50c046d761a07dbe50e9efc3e14c58d904c12debb609b55b60ac1a
  • alt-php82-devel-8.2.32-5.el6.x86_64.rpm
    sha:76c5de75f889b8dc3cf99b3b3ee5903818090079d0dc70305efb8dda7a5836d9
  • alt-php82-enchant-8.2.32-5.el6.x86_64.rpm
    sha:d94d52bf0c6e9468fb2005c64a4632162047c5459ac6eac95a5ee0a15d520451
  • alt-php82-firebird-8.2.32-5.el6.x86_64.rpm
    sha:bd2c01645d73283cc122017cca08e172f40cb49f98c47b80ec2aad8f67436357
  • alt-php82-gd-8.2.32-5.el6.x86_64.rpm
    sha:dbdfb6384b7c3d7d8120897c35067980096da85cc06848e80f16673e86a95a5e
  • alt-php82-gmp-8.2.32-5.el6.x86_64.rpm
    sha:c6b7fda2cc0b74b7e86fe6f61fc3bf772fdcadd8597a8a54e1fa334b00ec62f5
  • alt-php82-imap-8.2.32-5.el6.x86_64.rpm
    sha:88a830894672f8ae7db3113f9ee8fcf427b4a73a1c336663f70e85a0bdff4332
  • alt-php82-intl-8.2.32-5.el6.x86_64.rpm
    sha:e8b91364ef8cbb820b996778155f7fbab0fe2cf64012409bbafc34e34d97b250
  • alt-php82-ldap-8.2.32-5.el6.x86_64.rpm
    sha:a504a39e9228a0ea408c45573b5036739e62cc58cc1326002d38aa191128e9e4
  • alt-php82-mbstring-8.2.32-5.el6.x86_64.rpm
    sha:2124a0bc03af4f0939a986895e687e3319f7d7b766b816a39e0c7251dfd5580d
  • alt-php82-mysqlnd-8.2.32-5.el6.x86_64.rpm
    sha:194cdedb4a4c6d2f57e58ebd796299deed83756dfd62c76ecc67ade35b9deafc
  • alt-php82-odbc-8.2.32-5.el6.x86_64.rpm
    sha:bdba13667d48720e26f77313f37b974fd3a8382d5e4c7d27fead3336efc7d527
  • alt-php82-opcache-8.2.32-5.el6.x86_64.rpm
    sha:483cb5496dfc99b5771a7f129a17e1bbbe8acc810a66d1c1b29f9765b89f10fa
  • alt-php82-pdo-8.2.32-5.el6.x86_64.rpm
    sha:b5ee03b336076979a1db98e5388fe09f7bdc7bf82a8fd31f02d90596c4696f44
  • alt-php82-pgsql-8.2.32-5.el6.x86_64.rpm
    sha:b8516fd9f5fd136acd4ee9b9095b824de69854c32097cd1ef3f2da187656b4eb
  • alt-php82-php-fpm-8.2.32-5.el6.x86_64.rpm
    sha:f0bbced33d028cd772422f2df682c8dc16c556c87c59a163b2eb456384b7257e
  • alt-php82-process-8.2.32-5.el6.x86_64.rpm
    sha:877e3127d735ec3d31c47eab1a091b91785ede8b8ec48c48cb90a083a7e21278
  • alt-php82-pspell-8.2.32-5.el6.x86_64.rpm
    sha:b59cda8163907763702070532fb56b859735d2f3106b55a663542c6fb48add0d
  • alt-php82-snmp-8.2.32-5.el6.x86_64.rpm
    sha:1515a8d84aea35628569bbb5808a67859d0ada6826d31795b5a1ac8bebd12bd6
  • alt-php82-soap-8.2.32-5.el6.x86_64.rpm
    sha:f1cac028b64b2ba3ab23aa6469727d6b69a1410ab9a34e7814e28089c5c3fb90
  • alt-php82-sodium-8.2.32-5.el6.x86_64.rpm
    sha:09c7f0737136533cff5022e328e81d2b58069d1385f1db134d664fb8bad7bec4
  • alt-php82-tidy-8.2.32-5.el6.x86_64.rpm
    sha:52321a912e3ac48f39637e2f901689b3ee8d849fbe3f9de9528ad0bd1e150ebb
  • alt-php82-xml-8.2.32-5.el6.x86_64.rpm
    sha:891ffd66040c7dc2bfca10fa4c233c2abc5bbbb009cdec9716eba09096ce14a0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.