Release date:
2026-08-13 03:45:17 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder defects in
ext/gd/libgd/gd_gif_in.c; reset table[1][i] instead of table[1][0] when
clearing the LZW table, stop decoding once the LZW end code is seen instead of
falling through with a stale code, and zero-initialise the LZW_STATIC_DATA
scratch struct in ReadImage()
- CVE-2026-7260: phar stack exhaustion (unbounded recursion) on circular symlink
chains in tar-based archives (GHSA-vc5h-9ppw-p5f3); replace the self-recursion
in phar_get_link_source() with an iterative Floyd cycle-detection walk over a
new phar_follow_one_link() helper, and restore the path separator in
phar_get_link_location() so that helper is idempotent
Updated packages:
-
alt-php53-5.3.29-209.el10.x86_64.rpm
sha:d63e83c979e1395c4aadf913b290c997b0a2e3519794a636add91b3eafd5fe92
-
alt-php53-bcmath-5.3.29-209.el10.x86_64.rpm
sha:66576c30ec5a8a927477e98d051ea27635b2130a8853e53076b1f8737c1a57e5
-
alt-php53-cli-5.3.29-209.el10.x86_64.rpm
sha:2c6e16f1c2dd2d8dd670420744223b24362c1b3f7251a1e531a1b86e6686202b
-
alt-php53-common-5.3.29-209.el10.x86_64.rpm
sha:5d4ddb7880c04f7e07d615f31bf603adf483dd9e0051670be563a8174f409411
-
alt-php53-dba-5.3.29-209.el10.x86_64.rpm
sha:4ccfcc2297e8ae5ad963999f38228d2f2f2c2203dcdd69ff2f4d5be866946560
-
alt-php53-devel-5.3.29-209.el10.x86_64.rpm
sha:c7430bc033e4de8f8a94485e25a37a3e7aa7d2b32ba942460fb3a3f765cf2a28
-
alt-php53-enchant-5.3.29-209.el10.x86_64.rpm
sha:bfb0c20fb77fed461c1fa6e5f0d9939b182c8fd1694b5e6f075fdbbaeafaf1cc
-
alt-php53-gd-5.3.29-209.el10.x86_64.rpm
sha:688019869f8aab15cb44b9ad5085f684016b3618e5392cd40a68481292efad6f
-
alt-php53-imap-5.3.29-209.el10.x86_64.rpm
sha:00069cd53a7775c93ec89129926273000b6bf25740bfe48345182058daee3b63
-
alt-php53-intl-5.3.29-209.el10.x86_64.rpm
sha:7522ed50973d4a3490a1bdf04a14c5cb0c94f7dcac1120ab735f08c8f43d1949
-
alt-php53-ldap-5.3.29-209.el10.x86_64.rpm
sha:977007f41ff8f5d0ba374c0a36593960b8b237e46baa11178a6f8bf667040c60
-
alt-php53-mbstring-5.3.29-209.el10.x86_64.rpm
sha:0f4f2ab56c92808c77c2c8cd022e3cfb40759a918e4f762e2276e3747b6dd542
-
alt-php53-mcrypt-5.3.29-209.el10.x86_64.rpm
sha:5b3738ea2262478208a0e55b5de861610f7b087f98e1289df6d85bbc40448635
-
alt-php53-mssql-5.3.29-209.el10.x86_64.rpm
sha:6b53ee0bcae21c72ed531290466597e321e822caac59cf53d2a13739e89beb38
-
alt-php53-mysqlnd-5.3.29-209.el10.x86_64.rpm
sha:cd186449f717f351c4cc3865d33a784808bf0c23ecad976a2f9192655c21b3da
-
alt-php53-odbc-5.3.29-209.el10.x86_64.rpm
sha:05a6c8ae11f59e3def16760343eb1fe5979a8cc6d2f8a611bf4b2145641513f6
-
alt-php53-pdo-5.3.29-209.el10.x86_64.rpm
sha:6ed59b347bd06bd952a7e1809e193150d18b0134c2dae0375a18931b47f1b8e0
-
alt-php53-pgsql-5.3.29-209.el10.x86_64.rpm
sha:4284eb4f046e960f99a30500092f13fd52695da650f506801cdca3b86319f6c5
-
alt-php53-php-fpm-5.3.29-209.el10.x86_64.rpm
sha:ecc0d5343a03ef10d7da550fff41d726264e6b108fa424c908ba7befcdd18e28
-
alt-php53-process-5.3.29-209.el10.x86_64.rpm
sha:b3e7a87ad6a81f9a46b68eafd80fc2211bceab02118af64fef72ee8253ae9b61
-
alt-php53-pspell-5.3.29-209.el10.x86_64.rpm
sha:639b1fda42bc3972c0bde9c3b04a0db23e5b481b987a96f69c5ea00f5faad03c
-
alt-php53-recode-5.3.29-209.el10.x86_64.rpm
sha:f4af92892277cc19398b2536d8e644719db7c758a79690448cf6b27750ca494f
-
alt-php53-snmp-5.3.29-209.el10.x86_64.rpm
sha:ef059c5b792da9d7af9055654678e9e824d7d0c8e8da8f2dad3191580b24e0ac
-
alt-php53-soap-5.3.29-209.el10.x86_64.rpm
sha:82d42fa995bc2cdeeb9b984df8d9018df9aeefaec6109a7c947dc481b6c2d72a
-
alt-php53-sqlite-5.3.29-209.el10.x86_64.rpm
sha:98da2cfeb2c106313430f806ec2c1b5d0496a0d082f998419b43ef17b1a41419
-
alt-php53-sybase-5.3.29-209.el10.x86_64.rpm
sha:88899ba966ba116e0eb347ee477e483fda2d7f97002119e1216909890b066bbf
-
alt-php53-tidy-5.3.29-209.el10.x86_64.rpm
sha:2e7da6007c584ce9cadee86f8328ff75ed727849b5f8b964686a33e8ceca1a79
-
alt-php53-xml-5.3.29-209.el10.x86_64.rpm
sha:7fbad806081c3e4af8c883f5d7db5e1315424b10e8ce0c1a6784beed924ef049
-
alt-php53-xmlrpc-5.3.29-209.el10.x86_64.rpm
sha:73210e4daa85564109d12e0204dcc2797ad9978331e952449d6fe620d8983bd8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
