Release date:
2026-08-13 02:28:10 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder read an uninitialised code
table (sd->table[1][0] instead of sd->table[1][i] in the reset loop, plus
an uninitialised LZW_STATIC_DATA on the stack) and kept decoding past an
end-of-stream code
- CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted
values escaped by PQescapeStringConn() inside an E'...' constant, so a
trailing backslash broke out of the literal (SQL injection); emit a plain
'...' constant instead
- CVE-2026-7260: phar_get_link_source() followed tar symlink chains by
unbounded recursion, so a phar with circular symlinks exhausted the C
stack; walk the chain iteratively with Floyd cycle detection
Updated packages:
-
alt-php73-7.3.33-72.el6.x86_64.rpm
sha:d6866908d1d9a7853e017e5cbaddc257a7c895ba831067fe9665534d9cd10000
-
alt-php73-bcmath-7.3.33-72.el6.x86_64.rpm
sha:af0df40eba781c5051c977a85d017264eb58ed5e73f1140a0a5e4700f71d9d9d
-
alt-php73-cli-7.3.33-72.el6.x86_64.rpm
sha:17771fda103c1de5cf4eb55ff6f890c031122f8e22fdf8d476831e9449203e9e
-
alt-php73-common-7.3.33-72.el6.x86_64.rpm
sha:bcdcb8c45ac9c0162a4b7e8a6df0ff73f3b98355a8c32212e157d89314cff645
-
alt-php73-dba-7.3.33-72.el6.x86_64.rpm
sha:6b42180430ee24143e37a76ab237798a5e20dd9f9e23b46e4e5489f3c9211d0a
-
alt-php73-devel-7.3.33-72.el6.x86_64.rpm
sha:f0ba2be3c3c615968713502ee0412a6620f7337de41a2e4ce68955ea0ddcf1ed
-
alt-php73-enchant-7.3.33-72.el6.x86_64.rpm
sha:77cab6a88d9cd5fad16606da775637d07ffe17e2dbfab3d304445d7b8e4f5719
-
alt-php73-firebird-7.3.33-72.el6.x86_64.rpm
sha:830af998f4faf3ab714b2198ac297c424e19edaab54a272f45ee8403b8c5d98f
-
alt-php73-gd-7.3.33-72.el6.x86_64.rpm
sha:aa2c84ff51fd08962fc6f8f1c6ed4d5258654e6fd51b65621e423d18479398a4
-
alt-php73-imap-7.3.33-72.el6.x86_64.rpm
sha:8f7524258d62f979915608367cca7f5434e152eaf6ac2ee9015c5d689dd4ab44
-
alt-php73-intl-7.3.33-72.el6.x86_64.rpm
sha:400b6a6f8fc5fb10c3b5b7a065703dc4b2326ab211ee8529a8c72d4bf521da7e
-
alt-php73-ldap-7.3.33-72.el6.x86_64.rpm
sha:2ae63e4bcef9597e029b25c4b4323f9dcc98a1db4450e742dce000a117f66585
-
alt-php73-mbstring-7.3.33-72.el6.x86_64.rpm
sha:e2f00c881efc0b49cdf9589674859984fc3522eef18d1fcf104ca6081e004e79
-
alt-php73-mysqlnd-7.3.33-72.el6.x86_64.rpm
sha:57e017d352dfedf52771422355c28fbc9fe80344ae9d6c7dd3ef219294cdbf7e
-
alt-php73-odbc-7.3.33-72.el6.x86_64.rpm
sha:2d826e6ac1a07df0e868ea80f5a5ed133b3136a3f4e2036790a9323bed1f7b14
-
alt-php73-opcache-7.3.33-72.el6.x86_64.rpm
sha:e42fd8e56e4c523f8a67b014def68c48e8f26d7e0a7b4cf93c76a536f577cac9
-
alt-php73-pdo-7.3.33-72.el6.x86_64.rpm
sha:d8331dc3108dce6499eb77985aa3c52a85398dc4aee9c1bd33313450a795704d
-
alt-php73-pgsql-7.3.33-72.el6.x86_64.rpm
sha:27629fe2e31a0cee126842330d1085e903f7629843dee1ae2376fe18ad8d38d2
-
alt-php73-php-fpm-7.3.33-72.el6.x86_64.rpm
sha:169805c9105ff320c5e9c96e489ee0feeac2fa89005ff468a6e7c7ad45317b86
-
alt-php73-process-7.3.33-72.el6.x86_64.rpm
sha:7b7272933c30694b2299628b81a516bfba13e33f3785882e72e5a2cda183f303
-
alt-php73-pspell-7.3.33-72.el6.x86_64.rpm
sha:f2faf72a58452ebd5407001492cc43ec7c62b7bbc9fc43d6b9f39992253e4040
-
alt-php73-recode-7.3.33-72.el6.x86_64.rpm
sha:d29e1e6ae8a752a4b1398a5cef1743e8b10b992730f820c01a7c7307134ed797
-
alt-php73-snmp-7.3.33-72.el6.x86_64.rpm
sha:b5f993da561c3e408c26a0c48cf3c59b9df16fd61db4a6daa32e81ad31384421
-
alt-php73-soap-7.3.33-72.el6.x86_64.rpm
sha:55d7eee47fd698cb75045a46a8cf1f984e28dde12803a77f5214ba956f03dd73
-
alt-php73-sodium-7.3.33-72.el6.x86_64.rpm
sha:5f1d39a13ae7df6c26402f64f728675df092567890a8bab8b497773cbd487c2a
-
alt-php73-tidy-7.3.33-72.el6.x86_64.rpm
sha:776d564c58b478d26ed32d83c3428fc2bd16150263a7741e09a9fe69b8d5fe36
-
alt-php73-xml-7.3.33-72.el6.x86_64.rpm
sha:72d16cb56d2ca6ccb596f5c1fdf8aa6e42ad2056b20715b2d200fcac667eff36
-
alt-php73-xmlrpc-7.3.33-72.el6.x86_64.rpm
sha:cf306adb2b972623a7b8cef78985b17f9ed9945b5eef5b3398cb6e27230a8f47
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
