Release date:
2026-08-07 13:05:41 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder - the table reset cleared
sd->table[1][0] instead of sd->table[1][i] so stale suffixes leaked between
images, LWZReadByte_() kept decoding after the LZW end code when the trailing
data block count was 0, and ReadImage() left LZW_STATIC_DATA uninitialised
- CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped
PQescapeStringConn() output in an E'...' literal, which lets a trailing
backslash escape the closing quote while standard_conforming_strings is on.
Emit a plain '...' literal instead
- CVE-2026-7260: unbounded recursion in phar_get_link_source() on a circular
symlink chain (GHSA-vc5h-9ppw-p5f3); replaced by a Floyd cycle-detection walk,
including the phar_get_link_location() path-separator restore the walk needs
Updated packages:
-
alt-php72-7.2.34-86.el7.x86_64.rpm
sha:8dae4c3ffe2033b6a33c133fe09d2a45a6a6818a33ba3d195874babe9f6b7d14
-
alt-php72-bcmath-7.2.34-86.el7.x86_64.rpm
sha:a5e6d674da552f152dd5223d46704efebcf0684c2b970c710ba86b56029d3857
-
alt-php72-cli-7.2.34-86.el7.x86_64.rpm
sha:485aeded22baa0aa5433791f87af402332e2f86bd310e88af35957d3251aa575
-
alt-php72-common-7.2.34-86.el7.x86_64.rpm
sha:6e77fd6fc1172c2ecebccde0361164f3d853c2155e5c37bd077b3e45890e6011
-
alt-php72-dba-7.2.34-86.el7.x86_64.rpm
sha:ea6ab5c7895811947800a3fb7b1435be3fb45842cad2a1eeeb835255091c7813
-
alt-php72-devel-7.2.34-86.el7.x86_64.rpm
sha:98301e7280b961195edac7e4ce1d0f34790a37f6773146fb3fb9674c835d3ba7
-
alt-php72-enchant-7.2.34-86.el7.x86_64.rpm
sha:6bf1a64c0ec3c3ca43143f84518624cbbc4f1d3431b9843f942e28176da89305
-
alt-php72-firebird-7.2.34-86.el7.x86_64.rpm
sha:655406550236f317718face9d493fe7744e642931b4f2f37b06503b1ac453a92
-
alt-php72-gd-7.2.34-86.el7.x86_64.rpm
sha:555bdf42cb8741aae42bb3242e51a08270a44443fe4a0dafb73823bcaaeaee05
-
alt-php72-imap-7.2.34-86.el7.x86_64.rpm
sha:80b6c66a2394711558eb189d479f5db8053272afd7001c15cbb4b2fbf81c0b7e
-
alt-php72-intl-7.2.34-86.el7.x86_64.rpm
sha:d8ca97539dea0ac97a47600869878659844099be3dd8a09474df7fc2fee54ba8
-
alt-php72-ldap-7.2.34-86.el7.x86_64.rpm
sha:5232c47b0cb5b777dfbf3403fdf7707ab97f8f700a2546f70d7d4ad723195e74
-
alt-php72-mbstring-7.2.34-86.el7.x86_64.rpm
sha:37cc872d9f36843603499d97ed8c18119e705eb3c4429fbf96483970c9f13e19
-
alt-php72-mysqlnd-7.2.34-86.el7.x86_64.rpm
sha:44e3f28c444906f34da87c3d566892dc081a82bef340f58cc7f8209c185c0cbc
-
alt-php72-odbc-7.2.34-86.el7.x86_64.rpm
sha:0925ac7a3bb091c6cba42652f3a9b7a844682e5fc86b08806c8e87bfff0e09d7
-
alt-php72-opcache-7.2.34-86.el7.x86_64.rpm
sha:8581bffc7b1a29ff2ed6200d9c873ca70104669ddf1a2d2ab5a1f4b956f4120b
-
alt-php72-pdo-7.2.34-86.el7.x86_64.rpm
sha:527de28bd1d887472d762c541a6d545c4fc8df4425f3237b34e88f71d841a59a
-
alt-php72-pgsql-7.2.34-86.el7.x86_64.rpm
sha:687ee96e4cb3bee0fb4a56a23bbd4af087bfd9a34654a685d3c7238d0a88a281
-
alt-php72-php-fpm-7.2.34-86.el7.x86_64.rpm
sha:7ecd8bb91a674940b9922609decd538f47607f4d9a2243855f593980ed3a03c8
-
alt-php72-process-7.2.34-86.el7.x86_64.rpm
sha:69c3d2d628bd1ddf17e6f759aa9f20b6e0836ccce979ed6a71dfe026c9028f33
-
alt-php72-pspell-7.2.34-86.el7.x86_64.rpm
sha:00f7adb3d4c3bd5accf176312b83cd2e8fb172b5ff31e0135dd4e632586cbd3a
-
alt-php72-recode-7.2.34-86.el7.x86_64.rpm
sha:fe7725584f4498d3975c25272fcf31baddebfa6f2c74a4bff5485f6c241c4aa1
-
alt-php72-snmp-7.2.34-86.el7.x86_64.rpm
sha:e95ad0ae2d78ec57417a761d46b57ec52d3f4b311385514f14ce5637d1bfd0f5
-
alt-php72-soap-7.2.34-86.el7.x86_64.rpm
sha:d0910c66d91efcb1b7dca6171d39fe2dba5c243f5aad09c1933fe2240a87e823
-
alt-php72-sodium-7.2.34-86.el7.x86_64.rpm
sha:39664b1fc2727bd3fccb5a84af23dcc41548147df5a68cee504f7fa517249b6f
-
alt-php72-tidy-7.2.34-86.el7.x86_64.rpm
sha:a2553a82f6b59ce7602193ec327bd240e5a9c9da7434d272945efcb032b633b5
-
alt-php72-xml-7.2.34-86.el7.x86_64.rpm
sha:143f058a7247b2ef0145850cea061b61d0d5896dd7f306cb3b53ac0fdc2615fb
-
alt-php72-xmlrpc-7.2.34-86.el7.x86_64.rpm
sha:4cb61e23f08f910806918ad63059fd73087705bfb41feb62eb1e20ff02cb2fa2
-
alt-php72-zts-7.2.34-86.el7.x86_64.rpm
sha:111f689003cacaf9850661253636b106ad002127f2549a33b1f8b2c502ea4357
-
alt-php72-zts-devel-7.2.34-86.el7.x86_64.rpm
sha:c80fc5fa260e9a83a3514c3bc31a95e6fff5d97427ad7db822ec69f72c585560
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
