[CLSA-2026:1786389190] alt-php53: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-10 19:13:44 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder defects in ext/gd/libgd/gd_gif_in.c; reset table[1][i] instead of table[1][0] when clearing the LZW table, stop decoding once the LZW end code is seen instead of falling through with a stale code, and zero-initialise the LZW_STATIC_DATA scratch struct in ReadImage() - CVE-2026-7260: phar stack exhaustion (unbounded recursion) on circular symlink chains in tar-based archives (GHSA-vc5h-9ppw-p5f3); replace the self-recursion in phar_get_link_source() with an iterative Floyd cycle-detection walk over a new phar_follow_one_link() helper, and restore the path separator in phar_get_link_location() so that helper is idempotent
CVEs fixed:
Updated packages:
  • alt-php53-5.3.29-209.el6.x86_64.rpm
    sha:55f4b67f0991cf9d42101ef1b3cb3ce9e68aec7b72d6a8e3aaf4c2ec04facca2
  • alt-php53-bcmath-5.3.29-209.el6.x86_64.rpm
    sha:a11ccd1a067b385fc64dc23ce0abc492118827e8ebbf00a3a3d3bf18f364ab67
  • alt-php53-cli-5.3.29-209.el6.x86_64.rpm
    sha:c00b2e5f0f5eb9003ef0568bb3658968f0852985a62cce214a82624e50d45ac0
  • alt-php53-common-5.3.29-209.el6.x86_64.rpm
    sha:3f1f982e615c0841797a87576f3297bcbef98e2f37839f424e8eafc88523139e
  • alt-php53-dba-5.3.29-209.el6.x86_64.rpm
    sha:5a41564ccfc381be9a1d39462700a22acacbddbd730d510d24be0b8e2be10ce8
  • alt-php53-dbx-5.3.29-209.el6.x86_64.rpm
    sha:1894443b827b45ebe721a54bc4b3280cea3d7236920e4a115e561967db085a30
  • alt-php53-devel-5.3.29-209.el6.x86_64.rpm
    sha:1410183642074aaf11808aa3c458c1221ed8ee5e9255122ecde1a0f61768d16d
  • alt-php53-enchant-5.3.29-209.el6.x86_64.rpm
    sha:448dfde5c0d1c0aada32a47d0a19a6343565f14c96bf782e6c553c0704fbcb1e
  • alt-php53-firebird-5.3.29-209.el6.x86_64.rpm
    sha:cb3565fe9e7fc6808a23f327fbf8a72e8af0309d1334a4ba04a0bd887811e798
  • alt-php53-gd-5.3.29-209.el6.x86_64.rpm
    sha:ef97bf70800c7e19acb11d49db113e7d3543dde0d039fa743f78b2a10617ca93
  • alt-php53-imap-5.3.29-209.el6.x86_64.rpm
    sha:b69e2fe3f3fbef1e86fdb2c4f155dc42e7307a9e17f80ead29b42698be92952b
  • alt-php53-intl-5.3.29-209.el6.x86_64.rpm
    sha:6e3f0ea1d79d16cefbdfa7d30ac8b8065de4b431de3e48886856220e165c5778
  • alt-php53-ldap-5.3.29-209.el6.x86_64.rpm
    sha:c10ffd81e6e3c985ac924656ba9b5eeb414041c9f201b8e64b6fa8b3e5e008f5
  • alt-php53-mbstring-5.3.29-209.el6.x86_64.rpm
    sha:75110099c07f5995851aa32136ae6500b1c763a5737c6ba9789ee2e0b0f3f823
  • alt-php53-mcrypt-5.3.29-209.el6.x86_64.rpm
    sha:9267b5f023c55020d8516949a03cb883b43a183181bc9e5bfc59ede829964e59
  • alt-php53-mssql-5.3.29-209.el6.x86_64.rpm
    sha:d22b0e5417690e6ea4eae505de9d4a5a65081daf3b8930c9fdda4eef419cb10b
  • alt-php53-mysqlnd-5.3.29-209.el6.x86_64.rpm
    sha:08636652076dc5d487c40a89c31e231a75b0d8335052c7bc5832ef2d5ff821e9
  • alt-php53-odbc-5.3.29-209.el6.x86_64.rpm
    sha:9425ed5af0f223f9de1bd16b9d6187639828bb3f1b8083535fc4bb3f82b67d4a
  • alt-php53-pdo-5.3.29-209.el6.x86_64.rpm
    sha:b67d4256e4ddea105d3ca80e56ecf790f524afb75650be833ff22831c1e35281
  • alt-php53-pgsql-5.3.29-209.el6.x86_64.rpm
    sha:91e84d691fe4db7620472b80802d8d8c06a71c127dc4c6578706800b5a2ddb31
  • alt-php53-php-fpm-5.3.29-209.el6.x86_64.rpm
    sha:5694fe2e1b296752e1a8c4d6dc3205d145d81000f7b69710c469bf579c5fda7c
  • alt-php53-process-5.3.29-209.el6.x86_64.rpm
    sha:42d47c669df1abcc8d10025b1e3a13ed961141f1c5db787c6bd59a8b921175b7
  • alt-php53-pspell-5.3.29-209.el6.x86_64.rpm
    sha:e14a619d0e07f5831c07ef89a155e6ac96d6053c33426e285af85d660ff554a0
  • alt-php53-recode-5.3.29-209.el6.x86_64.rpm
    sha:ea4b12704e7f2e44b2f7abf806358c4b70bb45af6405d07b568f5085559526e4
  • alt-php53-snmp-5.3.29-209.el6.x86_64.rpm
    sha:f3577bff670cd0b48b7e8509fc120ecaedb25292ed3e463938e0380a83adfb07
  • alt-php53-soap-5.3.29-209.el6.x86_64.rpm
    sha:fd795a621a82c003aa2961a18f3a20a5d369e3ebcd674673674f4142596060c2
  • alt-php53-sqlite-5.3.29-209.el6.x86_64.rpm
    sha:637a564ae78d0992266d64c2d72a4b5f73ceeed53da363612deeb0ff23fb5079
  • alt-php53-sybase-5.3.29-209.el6.x86_64.rpm
    sha:28c073a2bc8c34c7d45a9d3bf4790dbf72f14c1b9dc1eafa68b020d991025f84
  • alt-php53-tidy-5.3.29-209.el6.x86_64.rpm
    sha:28cb7fe76be1fad4cc4d927ae68bec218012be492313c6f2eada2eb46e44d87d
  • alt-php53-xml-5.3.29-209.el6.x86_64.rpm
    sha:c6694d49510c102d712fde6c19339515e725ae72f061440ca8c3f3053c804c11
  • alt-php53-xmlrpc-5.3.29-209.el6.x86_64.rpm
    sha:b6407332da00e5d77b6c48fdc445fc0bf9cffbca0eb979a54f7e5c5d967f49fb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.