Release date:
2026-08-10 10:34:17 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder read an uninitialised code
table (sd->table[1][0] instead of sd->table[1][i] in the reset loop, plus
an uninitialised LZW_STATIC_DATA on the stack) and kept decoding past an
end-of-stream code
- CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted
values escaped by PQescapeStringConn() inside an E'...' constant, so a
trailing backslash broke out of the literal (SQL injection); emit a plain
'...' constant instead
- CVE-2026-7260: phar_get_link_source() followed tar symlink chains by
unbounded recursion, so a phar with circular symlinks exhausted the C
stack; walk the chain iteratively with Floyd cycle detection
Updated packages:
-
alt-php73-7.3.33-72.el8.x86_64.rpm
sha:3ea91fe2abacb39b386dba55313137b24e131aef660e9d64fa65f7690838de4c
-
alt-php73-bcmath-7.3.33-72.el8.x86_64.rpm
sha:39b2a6b8bf43f11b24656758ee107962d0809ae7821b33a7f5282f828c7023dc
-
alt-php73-cli-7.3.33-72.el8.x86_64.rpm
sha:8b1b8c5d7d60f32506c9101c4d2e5b73ed4f2f19236965713102fcb56647b6df
-
alt-php73-common-7.3.33-72.el8.x86_64.rpm
sha:a37d71b04d2bd6f9fe6c47a872660c454037de5cd44d05ecedeb4c59b0bd2581
-
alt-php73-dba-7.3.33-72.el8.x86_64.rpm
sha:45062e70cdcc0f2444fab6867df3744562c161fe52139f7f94f0c6ce4dbb1b73
-
alt-php73-devel-7.3.33-72.el8.x86_64.rpm
sha:164f52ed33514e08ccad44aead2fc345b73d12c32f5009d4078c03e4c58e6933
-
alt-php73-enchant-7.3.33-72.el8.x86_64.rpm
sha:d6fc761d640b3b66cfd521048f9ce787dfbd47d990f412e3fea85c6a25e1ca10
-
alt-php73-firebird-7.3.33-72.el8.x86_64.rpm
sha:8234b04e8907bdfd946e581ece3eb6765de6c3514a4ad918b6f11f6dd389ae53
-
alt-php73-gd-7.3.33-72.el8.x86_64.rpm
sha:60665fd45199924a4f2b540ce1ec97811bd71e7a59a5134a138c4a8dad23a1d6
-
alt-php73-imap-7.3.33-72.el8.x86_64.rpm
sha:640d02f95e81bd34bf91070def45ee53711d2167a0b461e92445adfc8efa46d2
-
alt-php73-intl-7.3.33-72.el8.x86_64.rpm
sha:5512a75827ac1a4af7f328f9dc409f5a768450c0fc737da901a16750fc8a8b5a
-
alt-php73-ldap-7.3.33-72.el8.x86_64.rpm
sha:2bf577fa6e97eaef37dd8a26664a0f642e8c382efe2f09eb6a22a05e722df734
-
alt-php73-mbstring-7.3.33-72.el8.x86_64.rpm
sha:b82df4439245d5599b8540753ece3c4e74c84b24810085b07e0e8759f52e4e51
-
alt-php73-mysqlnd-7.3.33-72.el8.x86_64.rpm
sha:a9f7dc5aa313877af0176afb70a05a5241a79ee37b8562c9a8b962f955c3d88b
-
alt-php73-odbc-7.3.33-72.el8.x86_64.rpm
sha:05976cbadef877f03e21cbb30c2afb9dcc7a3e4ada3b609bc9c08d25b388e642
-
alt-php73-opcache-7.3.33-72.el8.x86_64.rpm
sha:a975941d76aa7fccea7e2243087bfb2b49c4cb166468d9f4ffa1fddd5f8cde88
-
alt-php73-pdo-7.3.33-72.el8.x86_64.rpm
sha:20eae79d9d6e9e20dd168ce450f6a56abd8333de6d35017c22375a793f34cb81
-
alt-php73-pgsql-7.3.33-72.el8.x86_64.rpm
sha:a62128a2a95726acf390480c155f0b66456f4ac03c554de39af34943871a5f96
-
alt-php73-php-fpm-7.3.33-72.el8.x86_64.rpm
sha:c76c21c0de283c6f231957c5f15cb9db0df37d297eb158522a6fb898b3b08f74
-
alt-php73-process-7.3.33-72.el8.x86_64.rpm
sha:72b8518742fea5b207b5395cde135b3898322d2e47528369c3e8c192870d1093
-
alt-php73-pspell-7.3.33-72.el8.x86_64.rpm
sha:0b2396459035cc0eccde4985260168c47b6dc405c61e02eaf53004b04709447e
-
alt-php73-recode-7.3.33-72.el8.x86_64.rpm
sha:393f059e7035601bf4cfc65dbcfdaaff3fe162a2f1e7eee3df2bc5a14290efa4
-
alt-php73-snmp-7.3.33-72.el8.x86_64.rpm
sha:42540b10824537dfcb008fe34751b973ff7d437ceaa488f3d87f88b235796e81
-
alt-php73-soap-7.3.33-72.el8.x86_64.rpm
sha:d12130989d27684a65e9693c1c3d88f5e7c8d595fa5fb4600dbd3eb420b477a0
-
alt-php73-sodium-7.3.33-72.el8.x86_64.rpm
sha:5c0f7e483d57e174ca2c09bcb5ec0f96b369fde0aba9f89f96e17617aeccdc16
-
alt-php73-tidy-7.3.33-72.el8.x86_64.rpm
sha:ddbcff4429b13fa8d40183de7122bbf59f12023a048c09991a13d929c2ee4aa4
-
alt-php73-xml-7.3.33-72.el8.x86_64.rpm
sha:cfe4d6bf33e74be3babfc8fbf00ac14b219149f58cdd0638bfa1af1cb4c87721
-
alt-php73-xmlrpc-7.3.33-72.el8.x86_64.rpm
sha:aaf93d63368a70d224ace14a4854542ea34ee539c47c88545e321555b160a289
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
