[CLSA-2026:1786390575] alt-php53: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-10 19:38:01 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder defects in ext/gd/libgd/gd_gif_in.c; reset table[1][i] instead of table[1][0] when clearing the LZW table, stop decoding once the LZW end code is seen instead of falling through with a stale code, and zero-initialise the LZW_STATIC_DATA scratch struct in ReadImage() - CVE-2026-7260: phar stack exhaustion (unbounded recursion) on circular symlink chains in tar-based archives (GHSA-vc5h-9ppw-p5f3); replace the self-recursion in phar_get_link_source() with an iterative Floyd cycle-detection walk over a new phar_follow_one_link() helper, and restore the path separator in phar_get_link_location() so that helper is idempotent
CVEs fixed:
Updated packages:
  • alt-php53-5.3.29-209.el8.x86_64.rpm
    sha:295167a12bb050bd83ea99af4ed81747531d9025088790404a68343af8e2eda6
  • alt-php53-bcmath-5.3.29-209.el8.x86_64.rpm
    sha:9e4d09cd5e02ac81efbf5ac8f67500c68ecbba3424ad0269a5340e7a2d4bbbf7
  • alt-php53-cli-5.3.29-209.el8.x86_64.rpm
    sha:d3d362881502583f4cd609487caa5b32fe48e03a7cecfb3a5e3ee8d5ffa6d089
  • alt-php53-common-5.3.29-209.el8.x86_64.rpm
    sha:dbe502715cc7b3b80f240f3f135dfd63ee92e4f29b3e6fefcb4bd7a4f5aa5ad6
  • alt-php53-dba-5.3.29-209.el8.x86_64.rpm
    sha:a92a1036e1112555e181fa183ac077e0fd45d27da38229a84ae1210fdd7f7a0b
  • alt-php53-dbx-5.3.29-209.el8.x86_64.rpm
    sha:942fd1add3e9956c30aa18e75ca9bb59ddd430b5863ec34c1f5f3168e032a1eb
  • alt-php53-devel-5.3.29-209.el8.x86_64.rpm
    sha:a136b2509f5211a2b0508d4c8745a6a183146874f83db58e6abd311e74a1b7f2
  • alt-php53-enchant-5.3.29-209.el8.x86_64.rpm
    sha:ec8f004e6aa3eb67e3442efc6d6bab50a4c8b54f83e7e940df44f08919d4fe7f
  • alt-php53-firebird-5.3.29-209.el8.x86_64.rpm
    sha:11fd95f6461a4236f08838fd2eb94422682ed883b59a7d39ac41b8fe2a4fb73e
  • alt-php53-gd-5.3.29-209.el8.x86_64.rpm
    sha:7145f58f32709b7ff43ea03b54414e6e214f70ceb737f064d2e49659beca2eba
  • alt-php53-imap-5.3.29-209.el8.x86_64.rpm
    sha:e89abfa2fbf40b2039b0e0380715b87b4285bae932481a213b83f85de53a7299
  • alt-php53-intl-5.3.29-209.el8.x86_64.rpm
    sha:09433f080ddb93d6e5b7a49c16dadc6b4160a166cd0dd8c9a1f8397d1b8e5330
  • alt-php53-ldap-5.3.29-209.el8.x86_64.rpm
    sha:cfecac5b36807289735e7c9375f8e902b54e41c83a49038af2bdc67117f0edd1
  • alt-php53-mbstring-5.3.29-209.el8.x86_64.rpm
    sha:316723ef8b1505b14d1a7a6424a08c1a993da789f5b6bbcf072be0ac149d170d
  • alt-php53-mcrypt-5.3.29-209.el8.x86_64.rpm
    sha:ed3ee09b79aac650464233127e99a300acbc751b1e83eeb8c3511fcd130591e5
  • alt-php53-mssql-5.3.29-209.el8.x86_64.rpm
    sha:7745b4fa49408479f11c004f36bd3e45e2b68acc78b8d7403bdc5e499b646d38
  • alt-php53-mysqlnd-5.3.29-209.el8.x86_64.rpm
    sha:6f5b22b6f828ad2b2fd3c0907e0c0ab29ea29f7bc8dfdcb85c8e955af0fced11
  • alt-php53-odbc-5.3.29-209.el8.x86_64.rpm
    sha:fbf677f0d50f17ba6e0ec491c0575aa9959518b1e1a3928d42b422bb27c15f2c
  • alt-php53-pdo-5.3.29-209.el8.x86_64.rpm
    sha:eb3ebd6a0c0acf9be67442db5cc0e42ef7c884f09f380b45547be0bcf1d4153e
  • alt-php53-pgsql-5.3.29-209.el8.x86_64.rpm
    sha:2739f41a4a28c3647784b11a03ddc63750d7e09c3b0bd052fb5293cd16c81646
  • alt-php53-php-fpm-5.3.29-209.el8.x86_64.rpm
    sha:f132010d6d4cc59b3649b63e7e1477ee3b8bf8cbbcaea48d454af6b3e7990d2e
  • alt-php53-process-5.3.29-209.el8.x86_64.rpm
    sha:daa7d255e2acdc61cd6aea845b60a78214080a74600a72861de58031d2159ee7
  • alt-php53-pspell-5.3.29-209.el8.x86_64.rpm
    sha:f9a701d35c777d40c13ea9048a65cf35751562e0fb0d3238c18a1c180be9e9d9
  • alt-php53-recode-5.3.29-209.el8.x86_64.rpm
    sha:6ff8acc642ac10b253a5a0870d4fd37ad7478466e74457285428c4eab7ae56fb
  • alt-php53-snmp-5.3.29-209.el8.x86_64.rpm
    sha:db9f2eaec64eef055383ecef0803e458d8087a970a86c2accba689fbc4adc585
  • alt-php53-soap-5.3.29-209.el8.x86_64.rpm
    sha:8953594919160e354afbcc0705fade11206472ef5708550b4e97accdedd18b85
  • alt-php53-sqlite-5.3.29-209.el8.x86_64.rpm
    sha:efb151f8bf9b39041e267eac75970618e74fd66c82412d73c92ee82bfa284f60
  • alt-php53-sybase-5.3.29-209.el8.x86_64.rpm
    sha:4f00eaa529d76b7cf66d93a37756e47e3ed0efc5641e32a818e19d2325d2337e
  • alt-php53-tidy-5.3.29-209.el8.x86_64.rpm
    sha:072f6a1edbb6bb99190f53b5c5b7c35dcc2533c4c2432c1931b6a38a7b65c61e
  • alt-php53-xml-5.3.29-209.el8.x86_64.rpm
    sha:7fd9d9fe97a8bc9c3e29569c04a8551a2f7b80e1eaebcce299836035b629ce68
  • alt-php53-xmlrpc-5.3.29-209.el8.x86_64.rpm
    sha:a2f8461c73fd5e7e5ed263bf305f21c8d95f6af0e4307edbcb81fadef0aaa1d2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.