Release date:
2026-08-13 02:54:24 UTC
Description:
* CVE-2026-9672: three defects in the GIF LZW decoder of the bundled libgd -
the code-table reset loop wrote sd->table[1][0] instead of sd->table[1][i]
so most of table[1] kept stale data, LWZReadByte_() kept decoding past the
end-of-information code when the trailing data blocks drained cleanly, and
ReadImage() left its LZW_STATIC_DATA uninitialised on the stack
* CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped
values in an E'...' literal, in which the backslash left unescaped by
PQescapeStringConn() (the default standard_conforming_strings=on doubles
only the quote) escapes the following quote and lets a payload break out;
pg_convert(), pg_insert(), pg_update(), pg_delete() and pg_select() are
affected. Now quoted with a plain '...' literal
* CVE-2026-7260: unbounded recursion in phar_get_link_source() when a
tar-based phar archive contains a circular symlink chain; resolution is now
an iterative walk with Floyd cycle detection, returning NULL on a cycle
Updated packages:
-
alt-php70_7.0.33-140_amd64.deb
sha:eb9b52125d20bd317e6f8fdaa26ddc5560e06f3e
-
alt-php70-bcmath_7.0.33-140_amd64.deb
sha:6f066755cc75bbcf91cbe00974566d0b7a7afd2d
-
alt-php70-cli_7.0.33-140_amd64.deb
sha:3b8c18190ee7fc7e802852090bd35c0926dc0a17
-
alt-php70-common_7.0.33-140_amd64.deb
sha:5afcbfa677a92541d7d051181f49c74e7e2e5a4e
-
alt-php70-dba_7.0.33-140_amd64.deb
sha:9c7e8cd8d86714d5f5d2ec36ded048e60cc0b675
-
alt-php70-dev_7.0.33-140_amd64.deb
sha:fd96aaeaef85826392324e2670539414e7e0dc1b
-
alt-php70-enchant_7.0.33-140_amd64.deb
sha:9a0691077ee563c635d83a70341181be9380c677
-
alt-php70-firebird_7.0.33-140_amd64.deb
sha:06d0b759f8172f89dc42d75cc96bc412b68cca81
-
alt-php70-gd_7.0.33-140_amd64.deb
sha:c297471d5cc10ac63c789c8eee125fae7ab7fe32
-
alt-php70-imap_7.0.33-140_amd64.deb
sha:59faf40735aa864d4fd66ddee3eb21f624aa402c
-
alt-php70-intl_7.0.33-140_amd64.deb
sha:e822036ffbdde0fd6444e451e3754a0afbab2835
-
alt-php70-ldap_7.0.33-140_amd64.deb
sha:12712fe44856714ff0c62da64631cb9237ae93a1
-
alt-php70-mbstring_7.0.33-140_amd64.deb
sha:ec0b6d76a21bb49a1b7e793bfd222b9294368392
-
alt-php70-mcrypt_7.0.33-140_amd64.deb
sha:1b0ed484f88babd0a9855dd8afc1bee1321e6348
-
alt-php70-mysqlnd_7.0.33-140_amd64.deb
sha:0629c7f7b183831aa2ea6c4f0d9401d10d9316b6
-
alt-php70-odbc_7.0.33-140_amd64.deb
sha:2d4fda974b9e502063d1e86abfea0036012bf2ff
-
alt-php70-opcache_7.0.33-140_amd64.deb
sha:6c1622c67e25d812f3d761fb81b0d22a686aebfa
-
alt-php70-pdo_7.0.33-140_amd64.deb
sha:0a544f00429e5519c8d55775f92365d5bc9bcbc5
-
alt-php70-pgsql_7.0.33-140_amd64.deb
sha:c2b72abe8dea7cfb093abaa6138059ca8a9851bc
-
alt-php70-php-fpm_7.0.33-140_amd64.deb
sha:465415122f017e74206c9d0ab120200e0bb4397b
-
alt-php70-process_7.0.33-140_amd64.deb
sha:3bc47dd6653cc618b7118db7a3ce73ed2a082c96
-
alt-php70-pspell_7.0.33-140_amd64.deb
sha:974d723fadf47c5e1a4d6c52deac32117644826a
-
alt-php70-recode_7.0.33-140_amd64.deb
sha:6403005c0d22a4b90cf49cca9856a518485fdc1c
-
alt-php70-snmp_7.0.33-140_amd64.deb
sha:ac716aa9afb377b877c151c45b2af5b35803f894
-
alt-php70-soap_7.0.33-140_amd64.deb
sha:03b1c9a220c3d0800c02fd73b03583ee3ad70c4d
-
alt-php70-tidy_7.0.33-140_amd64.deb
sha:a614d99cfb53aba1ce2c4b0fd555c96523385447
-
alt-php70-xml_7.0.33-140_amd64.deb
sha:be39dbf7401a767afa569ec20463a82b53292270
-
alt-php70-xmlrpc_7.0.33-140_amd64.deb
sha:c948edcad9c197d285ece31f3286eab44fdbfba3
-
alt-php70_7.0.33-140_arm64.deb
sha:46d0b76c6822889e40cf73c4271d955bf39f41f3
-
alt-php70-bcmath_7.0.33-140_arm64.deb
sha:8766f90737bb54603e1c737aa8496c6012eb5cac
-
alt-php70-cli_7.0.33-140_arm64.deb
sha:2a4225c86cc65cfc2d1d0e5d793c98288ec7b2f8
-
alt-php70-common_7.0.33-140_arm64.deb
sha:ffcb79a69efe649ddf7b72c742aeeddef2efae26
-
alt-php70-dba_7.0.33-140_arm64.deb
sha:f97933611a65e90cda3098d07df3ee6ce6cca270
-
alt-php70-dev_7.0.33-140_arm64.deb
sha:077fbe759fd0124be79abff6d7e5dec8049c2b49
-
alt-php70-enchant_7.0.33-140_arm64.deb
sha:b8e5b3e03d1b31bc919c67e0cd37f425372dd620
-
alt-php70-firebird_7.0.33-140_arm64.deb
sha:bbb38cd433b42847cc2676c0366da22fd4521c0a
-
alt-php70-gd_7.0.33-140_arm64.deb
sha:7d84ebd3df61cde79cf86af27b1199d6852bd82b
-
alt-php70-imap_7.0.33-140_arm64.deb
sha:35f5e0660d012739606f7ebace4d9b6a04dfc158
-
alt-php70-intl_7.0.33-140_arm64.deb
sha:ee48a62ce976f335f92f1b1dfefe748c54d1d501
-
alt-php70-ldap_7.0.33-140_arm64.deb
sha:123aabe3f899adf530c9d6ebbaa0b6b18e4f5fc0
-
alt-php70-mbstring_7.0.33-140_arm64.deb
sha:98212a29ee2331d0097166301fca64443426fc6a
-
alt-php70-mcrypt_7.0.33-140_arm64.deb
sha:2f08731160d76fd98cbb8b19757b60457c3c0466
-
alt-php70-mysqlnd_7.0.33-140_arm64.deb
sha:2ecbd35c7ee23d7970149386c26a7ab448086d59
-
alt-php70-odbc_7.0.33-140_arm64.deb
sha:8c5289811cbb00ba26395b6b5702bff3ec2c4e3b
-
alt-php70-opcache_7.0.33-140_arm64.deb
sha:cfea4da04fd00a688a58120242434241aac010d6
-
alt-php70-pdo_7.0.33-140_arm64.deb
sha:24698244c4e725d4692162322f61d9ab5707f281
-
alt-php70-pgsql_7.0.33-140_arm64.deb
sha:0a47ef24f663ac5c4193d47fdeb967389a9e4818
-
alt-php70-php-fpm_7.0.33-140_arm64.deb
sha:4da7630fa9d93ed37d17dec9b35a7d0c4ab6e9d7
-
alt-php70-process_7.0.33-140_arm64.deb
sha:1b052f47262d79dfaad44dbb4cb62ec4199b5d82
-
alt-php70-pspell_7.0.33-140_arm64.deb
sha:d73b4d51d4422bd5f8466b85bf02717eadbf4be1
-
alt-php70-recode_7.0.33-140_arm64.deb
sha:34bff01c2999140e5bb48e9489e48eabea47a3b1
-
alt-php70-snmp_7.0.33-140_arm64.deb
sha:774438eae8117633c667184f578856127214f1b7
-
alt-php70-soap_7.0.33-140_arm64.deb
sha:3d54e46935cbe6c17c3e20b17b4f8aa070ce3658
-
alt-php70-tidy_7.0.33-140_arm64.deb
sha:e753e72a5134561b306ab89b8f7b1cebc4574c7a
-
alt-php70-xml_7.0.33-140_arm64.deb
sha:7a55de928dd19d92adb752d062942cc8ca77c746
-
alt-php70-xmlrpc_7.0.33-140_arm64.deb
sha:d831a1d763d9679b3ea6cd7a61edca986975b1b4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
