Release date:
2026-08-10 21:25:02 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder read an uninitialised code
table (sd->table[1][0] instead of sd->table[1][i] in the reset loop, plus
an uninitialised LZW_STATIC_DATA on the stack) and kept decoding past an
end-of-stream code
- CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted
values escaped by PQescapeStringConn() inside an E'...' constant, so a
trailing backslash broke out of the literal (SQL injection); emit a plain
'...' constant instead
- CVE-2026-7260: phar_get_link_source() followed tar symlink chains by
unbounded recursion, so a phar with circular symlinks exhausted the C
stack; walk the chain iteratively with Floyd cycle detection
Updated packages:
-
alt-php73-7.3.33-72.el9.x86_64.rpm
sha:70780e9b64fc0c745328b32ddc2515260306a803c393c9ebe1ae842584625097
-
alt-php73-bcmath-7.3.33-72.el9.x86_64.rpm
sha:6512b6131fff9a016561d2e7aed6760516375912068000235e1b91dee96c6401
-
alt-php73-cli-7.3.33-72.el9.x86_64.rpm
sha:e53d4ce75fc9eddba58453e57d723e533d3fdef185b13fdb611bec4c78da45d1
-
alt-php73-common-7.3.33-72.el9.x86_64.rpm
sha:1375f69f6785051fe6ec2396e03225e6eab85abb01a0acef401c8501fa86b8cb
-
alt-php73-dba-7.3.33-72.el9.x86_64.rpm
sha:1b8d756132d82aab66102dea3a892ccc1dc0ae471987e2a95233e53633cbacfb
-
alt-php73-devel-7.3.33-72.el9.x86_64.rpm
sha:8c1235b2f6ea4f71b8d66374f10b0f5581bdb5ff0ec33c1b6b59543600fa52da
-
alt-php73-enchant-7.3.33-72.el9.x86_64.rpm
sha:052c53fcad0ee4ce425f0a773e513ed52d9db031c47bcadb440dd92d2a04df24
-
alt-php73-firebird-7.3.33-72.el9.x86_64.rpm
sha:ce78721a9a391080e5a3348d75b1965642bc2a122e0f5287ef08bf34d518bfd7
-
alt-php73-gd-7.3.33-72.el9.x86_64.rpm
sha:16951811c215ea69cc89da09e3004936af6785ae1bdf3e3abad09c488d286eda
-
alt-php73-imap-7.3.33-72.el9.x86_64.rpm
sha:71ea3046296677216fbb64f953981dede49e206baeba8761ec38f2776c4c845f
-
alt-php73-intl-7.3.33-72.el9.x86_64.rpm
sha:15a57e225cd7eca24dcd72d2f69833ff853f922640ff0a32287c5b6062a8dd85
-
alt-php73-ldap-7.3.33-72.el9.x86_64.rpm
sha:32421e320bce55b5d8fa1357980858a4e30beff2ff3013cee20fbd60a9a56678
-
alt-php73-mbstring-7.3.33-72.el9.x86_64.rpm
sha:265fdb658c0b66ba81343095d4edb84e689a846981e25daf031507dd416ba494
-
alt-php73-mysqlnd-7.3.33-72.el9.x86_64.rpm
sha:48ffeb952307556d8541d51dd3a30b2c1270cccb0aa48fa0114908092f2de3a0
-
alt-php73-odbc-7.3.33-72.el9.x86_64.rpm
sha:b8e98b94fc85364bfb6d270ed5799dde023f750ba4dc0209f9bbd45f74aaa74a
-
alt-php73-opcache-7.3.33-72.el9.x86_64.rpm
sha:d731cb3c8cd21e40e7f9f9615510cc16838406ad44f9c08604b19471ddf28a8b
-
alt-php73-pdo-7.3.33-72.el9.x86_64.rpm
sha:a9dfdb43d2c408d2698b7f28f9cae3f12b7070d20b3afe727049476f7b145ac9
-
alt-php73-pgsql-7.3.33-72.el9.x86_64.rpm
sha:9abaa2d2f3f55ad29bbd9026304f43f092041960ba0e2e9ed73ab6810092aa0c
-
alt-php73-php-fpm-7.3.33-72.el9.x86_64.rpm
sha:5f77b811550b9d42d4b0920b3baf3e3464f5ea2089aea5a926b201878b62f8c6
-
alt-php73-process-7.3.33-72.el9.x86_64.rpm
sha:bdbec620abc4a241c079472a284ded625c3cc48d73337337db8c2d02c58e86d5
-
alt-php73-pspell-7.3.33-72.el9.x86_64.rpm
sha:50291e38c9f6635d1e9e28bf8832e0713519e65eee14c0b994436b90a738861f
-
alt-php73-recode-7.3.33-72.el9.x86_64.rpm
sha:a90aa7e0b1722bbf1e1e6877066655ad51990d9c26a9c545cf494e562fd17562
-
alt-php73-snmp-7.3.33-72.el9.x86_64.rpm
sha:fd23cf19fef87062a9d9e3941278e9c54fc7bcbf7e22a989440aeec2b2bdadaf
-
alt-php73-soap-7.3.33-72.el9.x86_64.rpm
sha:8bd60880d1e3db901eb9bd6aac21cfc9d410719df47f5ddf46b1daa6561affc8
-
alt-php73-sodium-7.3.33-72.el9.x86_64.rpm
sha:0e3dae7e72b62eba69d3d7210233fc72914be4b6636d99a3bd8ad153afc59bad
-
alt-php73-tidy-7.3.33-72.el9.x86_64.rpm
sha:ab67c5132789050b8effc633e815be89e7d31eb710df28974354a16197df456d
-
alt-php73-xml-7.3.33-72.el9.x86_64.rpm
sha:b5ff4219f6279e081fb25278729c2e86242502bd564d126526bbcaadf77ada85
-
alt-php73-xmlrpc-7.3.33-72.el9.x86_64.rpm
sha:7c2d380c864975b51b5954c830f9c0e79356d89d36a55b338e918f3d85ac05d9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
