[CLSA-2026:1786364136] alt-php71: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-10 12:15:48 UTC
Description:
- CVE-2026-9672: fix three defects in the bundled libgd GIF LZW decoder (ext/gd/libgd/gd_gif_in.c) - reset sd->table[1][i] instead of sd->table[1][0], stop decoding after the LZW end code, and zero-initialise LZW_STATIC_DATA in ReadImage() (backport of upstream fcd691b377d02285740744bee17c0f298be227d5) - CVE-2026-17543: fix SQL injection in ext/pgsql - php_pgsql_add_quotes() emitted E'...' while PQescapeStringConn() only doubles the quote, letting a trailing backslash break out of the literal (backport of upstream ab048bd83b578119cf81b456526d50498421d617) - CVE-2026-7260: fix phar circular symlink crash - phar_get_link_source() now follows the link chain with Floyd cycle detection instead of unbounded self-recursion, and phar_get_link_location() restores the path separator it temporarily overwrites (backport of upstream 2e0fa0a44441d74bf8cc4e1ce1c8af9cd4209f52)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-102.el7.x86_64.rpm
    sha:ca4997997e7166b1d744044bcfd38499e6f2d418589d9832746a9a2351a4f69f
  • alt-php71-bcmath-7.1.33-102.el7.x86_64.rpm
    sha:1ae287df7fb3c89c28d355689d9e782c06322837973ea8351642590ce1dc7744
  • alt-php71-cli-7.1.33-102.el7.x86_64.rpm
    sha:ca4807be6d23c88533658795b1f1f675c7706aba62492253997a69b3ca7dee63
  • alt-php71-common-7.1.33-102.el7.x86_64.rpm
    sha:e54f4593971b76396888337fe411277831ba1472104212f4c873152744663924
  • alt-php71-dba-7.1.33-102.el7.x86_64.rpm
    sha:a556f6308bdd69d111b9728c8be863b4dd424a60a57623ec821cfc35c7619aa9
  • alt-php71-devel-7.1.33-102.el7.x86_64.rpm
    sha:c433b1b1841293a0475606c4fe21e27ebaee2e9bdd4b7dcdf6b1f9938f484535
  • alt-php71-enchant-7.1.33-102.el7.x86_64.rpm
    sha:d08d027e268b47ebe4145627a67335961b25fd729f04a75ecd56987a2cd4cb43
  • alt-php71-firebird-7.1.33-102.el7.x86_64.rpm
    sha:d7b8ca46a2e4f1ed40f06cf10579c84dcd4c646ef456af8ea915b239084e3868
  • alt-php71-gd-7.1.33-102.el7.x86_64.rpm
    sha:2407031a04fc20ba9b627ee5ad22ed85443abc19f61c5a87b67c8c620c1ade5f
  • alt-php71-imap-7.1.33-102.el7.x86_64.rpm
    sha:69278fb91b0830528da58850dc024e81c6d843c4ca93f9eda0187300d08dfb22
  • alt-php71-intl-7.1.33-102.el7.x86_64.rpm
    sha:f92ab98f160758c29a82475484c2d9a0b0f7bdc04866b25a582d2880ef937670
  • alt-php71-ldap-7.1.33-102.el7.x86_64.rpm
    sha:f29dd7161f670678e99a073277b9c0338e2f0da54fadae261ecf1214ba0f9adb
  • alt-php71-mbstring-7.1.33-102.el7.x86_64.rpm
    sha:8b9062dc41f5d1dc331a949f5e336ab078b1fe12fd3e1c9e4f406bca2276205d
  • alt-php71-mcrypt-7.1.33-102.el7.x86_64.rpm
    sha:c1f08ca2b1cfb058358defb6690f93b616b3d129510e34911ce0926e4cb61e75
  • alt-php71-mysqlnd-7.1.33-102.el7.x86_64.rpm
    sha:be6a650a9d614dbdb8e34f5902070a08597b559d9a1b873e7c8e50fb90991fc9
  • alt-php71-odbc-7.1.33-102.el7.x86_64.rpm
    sha:582679382be3d09f198beec7409a11f670a4bb88a0ff3b0031241127b4c0b1e3
  • alt-php71-opcache-7.1.33-102.el7.x86_64.rpm
    sha:4615b15d587a3f1bf8012bc741c74b1013bf2fc75ac5697e91642759029f7671
  • alt-php71-pdo-7.1.33-102.el7.x86_64.rpm
    sha:e22b0ec955b8e369ac93845596726cf980c34ece355ce428e35ce480432524fc
  • alt-php71-pgsql-7.1.33-102.el7.x86_64.rpm
    sha:0a92d9e4de982d003e7ad0b670393eb9da10e6ac9ea8546f63e70a629a6ad8d4
  • alt-php71-php-fpm-7.1.33-102.el7.x86_64.rpm
    sha:e370aa087a06be70a2627a956a84d95670c04f60e810ca68beef3fcddfd90618
  • alt-php71-process-7.1.33-102.el7.x86_64.rpm
    sha:61ffe1b6fe2eba7ef6e6018af5a7d581cfbe640ce68cc312e808d4d9ba4a0c24
  • alt-php71-pspell-7.1.33-102.el7.x86_64.rpm
    sha:b5c5f201a9f1a8d848103e389a3a2b906a5e601f6f88b61bb134098ff2a18433
  • alt-php71-recode-7.1.33-102.el7.x86_64.rpm
    sha:b2449102953345fc46ae7536064c271f6b222917479f1b4d777ff8b49a100648
  • alt-php71-snmp-7.1.33-102.el7.x86_64.rpm
    sha:4af3c14f70288b8da729ace1f84ae8824ae653f270888a5887711d212e8dc0f0
  • alt-php71-soap-7.1.33-102.el7.x86_64.rpm
    sha:a9f14fc21f721b261197d047459f49fe1bddb5b197ca184ac60c391d45029787
  • alt-php71-tidy-7.1.33-102.el7.x86_64.rpm
    sha:4711186e8d5baf72642e4b5e85ec42221c20a2130ac753da057fab96989ffcbe
  • alt-php71-xml-7.1.33-102.el7.x86_64.rpm
    sha:9c58b04140f964a60061dc92434ecf64e3723b8c9fc19f73794f2345fed8d758
  • alt-php71-xmlrpc-7.1.33-102.el7.x86_64.rpm
    sha:c99cc9232a88a59fefc314d6d0b192c33fa6738cb798052d28b361b31714877c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.