[CLSA-2026:1786392509] alt-php53: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-10 20:08:48 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder defects in ext/gd/libgd/gd_gif_in.c; reset table[1][i] instead of table[1][0] when clearing the LZW table, stop decoding once the LZW end code is seen instead of falling through with a stale code, and zero-initialise the LZW_STATIC_DATA scratch struct in ReadImage() - CVE-2026-7260: phar stack exhaustion (unbounded recursion) on circular symlink chains in tar-based archives (GHSA-vc5h-9ppw-p5f3); replace the self-recursion in phar_get_link_source() with an iterative Floyd cycle-detection walk over a new phar_follow_one_link() helper, and restore the path separator in phar_get_link_location() so that helper is idempotent
CVEs fixed:
Updated packages:
  • alt-php53-5.3.29-209.el9.x86_64.rpm
    sha:75d8084ffdc877ada82832c4883e628caed60e4ea53c64788b4115c29a0f9c75
  • alt-php53-bcmath-5.3.29-209.el9.x86_64.rpm
    sha:ad8d0931e2cc1f07b722986aa1222494d9bd100b28c55b728cbc5bc7ed511a78
  • alt-php53-cli-5.3.29-209.el9.x86_64.rpm
    sha:b8f2d0a2e106e0596ffba86132ef4b97a6776bf58c3f101655824eff9ac19007
  • alt-php53-common-5.3.29-209.el9.x86_64.rpm
    sha:9081cf5f6309b93fc70161d18f5573940e60ea4f261d965ee082826afffc0926
  • alt-php53-dba-5.3.29-209.el9.x86_64.rpm
    sha:5ffde17f4627e6cd67362ba8a5fe2b83c9b1db59e0607776ff6bfee88815cc04
  • alt-php53-dbx-5.3.29-209.el9.x86_64.rpm
    sha:56a521f8e8c8a030b0ea32014b29ffd77da04262ad693b635881dc71799ce81c
  • alt-php53-devel-5.3.29-209.el9.x86_64.rpm
    sha:94ecb27661b37e990bc373731815d4de504699ddecd2818c17910e2c234b33d5
  • alt-php53-enchant-5.3.29-209.el9.x86_64.rpm
    sha:4307db97164ba684fda4476484dc7e0c75ce907010a0cc1ec09f9ae3035fa160
  • alt-php53-firebird-5.3.29-209.el9.x86_64.rpm
    sha:401d2266df71d3ad13322e85110f33bd721fe0576a042ff0bf9697768f2dda84
  • alt-php53-gd-5.3.29-209.el9.x86_64.rpm
    sha:78ba8e9d286948171b1f84b6a9bffc2a1de65bce615dbcb6a5486d30f7c3ebaa
  • alt-php53-imap-5.3.29-209.el9.x86_64.rpm
    sha:873ad37da02f74a9cb94d35c934ffb0b37289506db194fcb06a75a19a8459424
  • alt-php53-intl-5.3.29-209.el9.x86_64.rpm
    sha:c174764c6578d0627e70cb37fa230c64c381a90325de33330fb3bdbc9f172488
  • alt-php53-ldap-5.3.29-209.el9.x86_64.rpm
    sha:82cefd1568fef44ccf78a688ac5bc2e58ee56b4bbbfa16ba2a4fb72cacaa068a
  • alt-php53-mbstring-5.3.29-209.el9.x86_64.rpm
    sha:c5158060e2463d4677b14906bb7aaaa73c5805320706809a94b8b71099299d0d
  • alt-php53-mcrypt-5.3.29-209.el9.x86_64.rpm
    sha:4c9f702536fca6cf51688205371127851c73aee6456bd4e7cd168c05ce5a7700
  • alt-php53-mssql-5.3.29-209.el9.x86_64.rpm
    sha:f2d93be1327c7178b5ed7be23e72b752d8e2f94d519d1496004c3d80a4ec1e53
  • alt-php53-mysqlnd-5.3.29-209.el9.x86_64.rpm
    sha:11401837e13ad431943aa0efb6bfb14fffebc372ba5f73e199139c853e104409
  • alt-php53-odbc-5.3.29-209.el9.x86_64.rpm
    sha:aa2a989f3cb99c20a8502479fc2fbad71858d1179da3e8d15fec3f7526f7136f
  • alt-php53-pdo-5.3.29-209.el9.x86_64.rpm
    sha:a5e0e325c7f50238027c259b7aa77aedbcb28910132e0b6501865ae928e20d4d
  • alt-php53-pgsql-5.3.29-209.el9.x86_64.rpm
    sha:7dd2bb8d50b15b0e681bf490908d5872bf0384feb25eb5c7809d2afa0bacea52
  • alt-php53-php-fpm-5.3.29-209.el9.x86_64.rpm
    sha:d4a7ae1379386f3ea0015525935f73fc253a77519a56fce6fa06e57ecfa11f5c
  • alt-php53-process-5.3.29-209.el9.x86_64.rpm
    sha:fd36959b3a36595d123f17a9b2ce7d7df0c4e35db31f3c3fbc6a5cd8c0f83b5c
  • alt-php53-pspell-5.3.29-209.el9.x86_64.rpm
    sha:1270966525692e6e927bb7a0942a8984da1fc4d190290ad9aec1b434aa1a4b5f
  • alt-php53-recode-5.3.29-209.el9.x86_64.rpm
    sha:10139e4ed6c9dcb85219ea0112e8fc63d90c2a7ded852425b08636a633734212
  • alt-php53-snmp-5.3.29-209.el9.x86_64.rpm
    sha:a0228e7c9f8657d34d5e9f0f39aadfc7cc8799ca07d580981d8957f9f81f9f87
  • alt-php53-soap-5.3.29-209.el9.x86_64.rpm
    sha:ddfc610aaef826dfcaa72ef5e56a54edacface85c1455e36c749ad78c55719d3
  • alt-php53-sqlite-5.3.29-209.el9.x86_64.rpm
    sha:340a67e01d018ec20ea75271d7d2cf8d82e8f3309e39d49965cc8f48aa3923bf
  • alt-php53-sybase-5.3.29-209.el9.x86_64.rpm
    sha:ba80c61dc0a9df11b894a9d58c06accf9625842e29ae599073320f863b3cdc34
  • alt-php53-tidy-5.3.29-209.el9.x86_64.rpm
    sha:ed7be3bdc20cf56eec7f51cd3ef040f09a1e3375da1ae2eac905b558fe4f9975
  • alt-php53-xml-5.3.29-209.el9.x86_64.rpm
    sha:67f1ee083a57e58fb3af8cba05168b046043031320dd3ded7fdab125185276d7
  • alt-php53-xmlrpc-5.3.29-209.el9.x86_64.rpm
    sha:e321f1aea63c800a2fd56d16bfb108fdc5caca2187b656d14957932d4c4595f8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.