Release date:
2026-08-07 12:54:49 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder - the table reset cleared
sd->table[1][0] instead of sd->table[1][i] so stale suffixes leaked between
images, LWZReadByte_() kept decoding after the LZW end code when the trailing
data block count was 0, and ReadImage() left LZW_STATIC_DATA uninitialised
- CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped
PQescapeStringConn() output in an E'...' literal, which lets a trailing
backslash escape the closing quote while standard_conforming_strings is on.
Emit a plain '...' literal instead
- CVE-2026-7260: unbounded recursion in phar_get_link_source() on a circular
symlink chain (GHSA-vc5h-9ppw-p5f3); replaced by a Floyd cycle-detection walk,
including the phar_get_link_location() path-separator restore the walk needs
Updated packages:
-
alt-php72-7.2.34-86.el9.x86_64.rpm
sha:40fe6694d1a99b23c89a17a7dcda9d1983e749a34cb87a0b9ac3421b15291b8c
-
alt-php72-bcmath-7.2.34-86.el9.x86_64.rpm
sha:78894c7cb59304776c0d6e321426749c58ebdf33c5508413d6f30e76694ffbf5
-
alt-php72-cli-7.2.34-86.el9.x86_64.rpm
sha:22dc22c7e0d4b7a37e4ef53f77fb27bb6a2a2b5ab0e62437b7ea4b3575b60d55
-
alt-php72-common-7.2.34-86.el9.x86_64.rpm
sha:d0d8d28294c904db175817d100c68b82ec291e0d720d250e7a6f3ceda62bc4fe
-
alt-php72-dba-7.2.34-86.el9.x86_64.rpm
sha:3387c4c66dbc3f3952f695ca463ea9d66a2e8a6efa31d4c0ef3c9be75b007c86
-
alt-php72-devel-7.2.34-86.el9.x86_64.rpm
sha:5f3eb4c5fb75aa86435959da41941e3ca38fde1b846f26dc59b70aa67fba4fac
-
alt-php72-enchant-7.2.34-86.el9.x86_64.rpm
sha:94fa4ae47768a1c57c3136e8f730b659845b295341ca4e516c740fe3f8a6b652
-
alt-php72-firebird-7.2.34-86.el9.x86_64.rpm
sha:2719918d082d056f65f7931887d9370a66c10a8505e8491e724f4efe871a858c
-
alt-php72-gd-7.2.34-86.el9.x86_64.rpm
sha:28f47e62e6a08988a6cb290909e5c4e0c547c693dc66886e61f9b5d1712dd4d9
-
alt-php72-imap-7.2.34-86.el9.x86_64.rpm
sha:d4b191afec146bc4c995c9863980c5e17cb5f6bde0d2addfa50a6bae8d32bd25
-
alt-php72-intl-7.2.34-86.el9.x86_64.rpm
sha:4d9b4ee86b805b0b2035f2be2a0027bb4871c75187154f8b2624fe40c27d3d47
-
alt-php72-ldap-7.2.34-86.el9.x86_64.rpm
sha:9a775b42f2b5f223e5d7e2620832c1c2e3e3f6a70e492a27949f75a47cb89b90
-
alt-php72-mbstring-7.2.34-86.el9.x86_64.rpm
sha:65c59243003c8c7afa7374eee991f54db307a459f3f942594dfbd50b0aa5eb0d
-
alt-php72-mysqlnd-7.2.34-86.el9.x86_64.rpm
sha:9054e600bc31f2135ec8cf199f4e80d61e68323b82432cf346a2ea992fc15e65
-
alt-php72-odbc-7.2.34-86.el9.x86_64.rpm
sha:f338b6d7f591b90fc59354d729a6e6bf92f9aab100131a9fc4f4647751cfa288
-
alt-php72-opcache-7.2.34-86.el9.x86_64.rpm
sha:fe4efb2f99b5fd9b8c4529849ca2d88d22ee9e47dd2afb86b227ebc70b318d4b
-
alt-php72-pdo-7.2.34-86.el9.x86_64.rpm
sha:393e762ce1ec572063e6a6fde7d6918390dd9d02bca05decf7574d174e1aeb3c
-
alt-php72-pgsql-7.2.34-86.el9.x86_64.rpm
sha:29cbebb8266755fe0b7f36d4c1fa0098fca4ba9b0205e29a78ea7cd2acf7b608
-
alt-php72-php-fpm-7.2.34-86.el9.x86_64.rpm
sha:44379fa1008a2949701021863ebbaa3c7ec75ae59be6fd920a0e6bd037fbeb8c
-
alt-php72-process-7.2.34-86.el9.x86_64.rpm
sha:8356398a9e1029afeaa8c474b9b9f20f0ccf27a67b696578058ec06efb94e710
-
alt-php72-pspell-7.2.34-86.el9.x86_64.rpm
sha:9918c39e4c9b09b612a8e74877ec451a9c5d0113564f1fe0e110e5c7fd766961
-
alt-php72-recode-7.2.34-86.el9.x86_64.rpm
sha:ca0c147cbe82b1b804e55e050b2756106956a7f9bb5e6cb551e822dad8f80725
-
alt-php72-snmp-7.2.34-86.el9.x86_64.rpm
sha:53957f8fa8c7622ff1dfccf4287e6973e5db9a616d21432aeb11d76dd1fb226c
-
alt-php72-soap-7.2.34-86.el9.x86_64.rpm
sha:3424d54c6876cbe62d724bcbaa835eb348f24b50d8f8269f7ea4b71a5a042fd6
-
alt-php72-sodium-7.2.34-86.el9.x86_64.rpm
sha:d17a1bcd55c856c8fe37a5c061d0999e16dc6e81d6d54043686168dcd259e0cd
-
alt-php72-tidy-7.2.34-86.el9.x86_64.rpm
sha:ba717f2d230ec215df663c11c3a46ca1d75cb42aa11a115d3939e893018070c9
-
alt-php72-xml-7.2.34-86.el9.x86_64.rpm
sha:6b2220298bf2ee8b4ca37df127f4c8dc3d809cc11c842ee4b3e85db8466e1d2f
-
alt-php72-xmlrpc-7.2.34-86.el9.x86_64.rpm
sha:8de9be1615fd8d30ebc8f4ed98a70c75b23bb1d2545ffd064fc088e6ffd89d58
-
alt-php72-zts-7.2.34-86.el9.x86_64.rpm
sha:d82c952b12824d1487e90c88d3706558d540c53d6facfd807473b20d769b3924
-
alt-php72-zts-devel-7.2.34-86.el9.x86_64.rpm
sha:3a764040c8f32cda508759d3b82b62e1307f63118a23ead988b187fe0f81f059
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
