[CLSA-2026:1786366087] Fix CVE(s): CVE-2026-17543, CVE-2026-7260, CVE-2026-9672
Type:
security
Severity:
Critical
Release date:
2026-08-10 12:48:21 UTC
Description:
* CVE-2026-9672: bundled libgd GIF LZW decoder read an uninitialised code table (sd->table[1][0] instead of sd->table[1][i] in the reset loop, plus an uninitialised LZW_STATIC_DATA on the stack) and kept decoding past an end-of-stream code * CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted values escaped by PQescapeStringConn() inside an E'...' constant, so a trailing backslash broke out of the literal (SQL injection); emit a plain '...' constant instead * CVE-2026-7260: phar_get_link_source() followed tar symlink chains by unbounded recursion, so a phar with circular symlinks exhausted the C stack; walk the chain iteratively with Floyd cycle detection
CVEs fixed:
Updated packages:
  • alt-php73_7.3.33-74_amd64.deb
    sha:c252e4b3d748fa27b930ca85bbbf83ee3071a455
  • alt-php73-bcmath_7.3.33-74_amd64.deb
    sha:4f501116a3cec393aba4e5fb1e13a8d63bd8948f
  • alt-php73-cli_7.3.33-74_amd64.deb
    sha:61269d04f8c60424cf3002a2519d3ed3178b84d1
  • alt-php73-common_7.3.33-74_amd64.deb
    sha:c1474c616d75879e5d0da8f32271e6d8c90529c3
  • alt-php73-dba_7.3.33-74_amd64.deb
    sha:21505d20a0673208163784217fe575cdd9ca6864
  • alt-php73-dev_7.3.33-74_amd64.deb
    sha:236d944e4aab20b74cd80e1e33e54d0569ecd4a4
  • alt-php73-enchant_7.3.33-74_amd64.deb
    sha:2e4cc78f1f451b6ffe910e91a6c76f3e9d5c5e2c
  • alt-php73-firebird_7.3.33-74_amd64.deb
    sha:95b436dbef43d3a383aed424966ca4ffc2109e2d
  • alt-php73-gd_7.3.33-74_amd64.deb
    sha:6c9c25120a130378e623c10cb0fd7b39492a0651
  • alt-php73-imap_7.3.33-74_amd64.deb
    sha:65eaf106dc3c287276f50346b9e8d9b181bac768
  • alt-php73-intl_7.3.33-74_amd64.deb
    sha:f1d127db176675c6d5a9149c5146e75dd22b4625
  • alt-php73-ldap_7.3.33-74_amd64.deb
    sha:93c0ad01f20707a9259109f0739d6fd6335115a7
  • alt-php73-mbstring_7.3.33-74_amd64.deb
    sha:e778b3654ad5e9947acdd469daf8167651e0baab
  • alt-php73-mysqlnd_7.3.33-74_amd64.deb
    sha:1b2692f31f2d8be4a10828e65adad9f8d2f71c7a
  • alt-php73-odbc_7.3.33-74_amd64.deb
    sha:0643417fb39f6d7c70f05dc2cfeb89f9bae8c8f5
  • alt-php73-opcache_7.3.33-74_amd64.deb
    sha:71f8c10f5b1115d02d13ea1b0695343f595ab64f
  • alt-php73-pdo_7.3.33-74_amd64.deb
    sha:355e64364273e3fbb47c9811199737fef783676d
  • alt-php73-pgsql_7.3.33-74_amd64.deb
    sha:152d48455ffa0780b485ca02c79e81ccd83fd2bf
  • alt-php73-php-fpm_7.3.33-74_amd64.deb
    sha:7a4c8ba5c62e70537833d675b81b5c4bb1ab9ebf
  • alt-php73-process_7.3.33-74_amd64.deb
    sha:dc2307392ecb747cc4850e88c665814f166adee5
  • alt-php73-pspell_7.3.33-74_amd64.deb
    sha:ad636172b3f2afe1258efe0ace61a9e27f69f6a8
  • alt-php73-recode_7.3.33-74_amd64.deb
    sha:380fc6e8aed95bbe38f0431905e399ba5cfa7453
  • alt-php73-snmp_7.3.33-74_amd64.deb
    sha:3735c1651b93feb723f0e87430725ce3cd610173
  • alt-php73-soap_7.3.33-74_amd64.deb
    sha:a28cffbb8bb64a7678895aef23f52145b9508620
  • alt-php73-sodium_7.3.33-74_amd64.deb
    sha:8ca81aac8eaab697f0c6440da0c7683c8f8940cf
  • alt-php73-tidy_7.3.33-74_amd64.deb
    sha:dfa5bc0778835b35b97d01dc5fa6aaecf6344b7e
  • alt-php73-xml_7.3.33-74_amd64.deb
    sha:1bce1177631ac3251106a50afd72e5c1fdc258ec
  • alt-php73-xmlrpc_7.3.33-74_amd64.deb
    sha:2da68c6ff9620235eb97c7eca6d941ff992cd83d
  • alt-php73_7.3.33-74_arm64.deb
    sha:0e87db9d94d7fbf27be490b1916b06289a9ac759
  • alt-php73-bcmath_7.3.33-74_arm64.deb
    sha:f609fe42ab3d3364ce2718c292dedb3b3efd09c8
  • alt-php73-cli_7.3.33-74_arm64.deb
    sha:46bffe2cfa773b85ce2e8ff98d602eaecf4da53f
  • alt-php73-common_7.3.33-74_arm64.deb
    sha:7c785cf00521cdf829b0130b579db751e2a2df4f
  • alt-php73-dba_7.3.33-74_arm64.deb
    sha:ca9d91d343e0c1c53053a678f9c5c726d1482eda
  • alt-php73-dev_7.3.33-74_arm64.deb
    sha:121e093362710bb06e4d4cc67ac6310c29166c6f
  • alt-php73-enchant_7.3.33-74_arm64.deb
    sha:16620d2145bcbe4795b72bb5f16c24052e94cbc0
  • alt-php73-firebird_7.3.33-74_arm64.deb
    sha:849a8c3b77e9e5a884fa0d16b12923692b1f5bd9
  • alt-php73-gd_7.3.33-74_arm64.deb
    sha:4acd8d160ffe07e331aa84efa51891cb06ed6e0d
  • alt-php73-imap_7.3.33-74_arm64.deb
    sha:4969a98ea18f2572bfd0aed86f3d93bbefccd426
  • alt-php73-intl_7.3.33-74_arm64.deb
    sha:c25b012c2088325a6cef4b240752907edfc2217b
  • alt-php73-ldap_7.3.33-74_arm64.deb
    sha:0c0fbe726e8a2501bed7ac2fb5467cfc4d8f2552
  • alt-php73-mbstring_7.3.33-74_arm64.deb
    sha:8930b2d71f4bb5a9cb59e06bcbbf5f11f307da9f
  • alt-php73-mysqlnd_7.3.33-74_arm64.deb
    sha:b5caddedb8c8ef40479eebf67ad0480403613f9f
  • alt-php73-odbc_7.3.33-74_arm64.deb
    sha:4ebac7b46d847f0155b7f9f9cb42e8702d44ffb8
  • alt-php73-opcache_7.3.33-74_arm64.deb
    sha:73375ace99052d2cdf6fa9340290e4a2f322f010
  • alt-php73-pdo_7.3.33-74_arm64.deb
    sha:7196bcc715a3cfc343df6b37c70d393bec572f81
  • alt-php73-pgsql_7.3.33-74_arm64.deb
    sha:255adeac7070d1fb05bb803bc889f5862c4819db
  • alt-php73-php-fpm_7.3.33-74_arm64.deb
    sha:e6144f343c3e718f85e2475a74996ad2f802c2a7
  • alt-php73-process_7.3.33-74_arm64.deb
    sha:ad5064ad03e521a3cc8804801d2638dd951f8a36
  • alt-php73-pspell_7.3.33-74_arm64.deb
    sha:40142aaca4e19505cfef4e09f4e029b8ab8105ee
  • alt-php73-recode_7.3.33-74_arm64.deb
    sha:afa8000b246f8563b5e65ad4dd13f19493f722bf
  • alt-php73-snmp_7.3.33-74_arm64.deb
    sha:7b09b94667d53c23dda0cb55f96c1e37a243bda0
  • alt-php73-soap_7.3.33-74_arm64.deb
    sha:94ee391ea7a0d81e82f40a85df9251cf5b9a41a4
  • alt-php73-sodium_7.3.33-74_arm64.deb
    sha:5b4b6b4dfe982d5714b7fd6f9f653b1af4b12260
  • alt-php73-tidy_7.3.33-74_arm64.deb
    sha:34f5d72f1a5ef589bc579bdfbfee06c670739810
  • alt-php73-xml_7.3.33-74_arm64.deb
    sha:4b9ab4e59203ca735b6eaa707b7f02e1ed3b7d51
  • alt-php73-xmlrpc_7.3.33-74_arm64.deb
    sha:055b1d63c2e2cc55308f5081294002deab003090
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.