[CLSA-2026:1786439275] alt-php71: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-11 09:08:12 UTC
Description:
- CVE-2026-9672: fix three defects in the bundled libgd GIF LZW decoder (ext/gd/libgd/gd_gif_in.c) - reset sd->table[1][i] instead of sd->table[1][0], stop decoding after the LZW end code, and zero-initialise LZW_STATIC_DATA in ReadImage() (backport of upstream fcd691b377d02285740744bee17c0f298be227d5) - CVE-2026-17543: fix SQL injection in ext/pgsql - php_pgsql_add_quotes() emitted E'...' while PQescapeStringConn() only doubles the quote, letting a trailing backslash break out of the literal (backport of upstream ab048bd83b578119cf81b456526d50498421d617) - CVE-2026-7260: fix phar circular symlink crash - phar_get_link_source() now follows the link chain with Floyd cycle detection instead of unbounded self-recursion, and phar_get_link_location() restores the path separator it temporarily overwrites (backport of upstream 2e0fa0a44441d74bf8cc4e1ce1c8af9cd4209f52)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-102.el9.x86_64.rpm
    sha:f29a2876911137baa59ab19101801b96cc96cb888b39528b6b380d1a32906386
  • alt-php71-bcmath-7.1.33-102.el9.x86_64.rpm
    sha:e5b048ed28572021ac442544f5a119b7dd8c3e0c3f7ae58c522b146f9d83dce1
  • alt-php71-cli-7.1.33-102.el9.x86_64.rpm
    sha:b115ce41a176ebb40f4e99f8241aa615b2798582250ed046f4a35cc52053d5a3
  • alt-php71-common-7.1.33-102.el9.x86_64.rpm
    sha:a0ca40e8ea32a52abff0df7fd35c3f8f9b1c2f2b62a34d5f6f97ec6872ffa0d9
  • alt-php71-dba-7.1.33-102.el9.x86_64.rpm
    sha:5c5b442eadae72360e2de838ca565f0f10c4267b8a51140ffd497c3cd4289495
  • alt-php71-devel-7.1.33-102.el9.x86_64.rpm
    sha:cb07d27647ef894c52f773df86ffc8745ecba13c55e2aa491a4c7e6938dd9d6c
  • alt-php71-enchant-7.1.33-102.el9.x86_64.rpm
    sha:9dcc6d5d4c57fb3e0ef465e1078d02b61997ac73c160386242a8855a5bfad30e
  • alt-php71-firebird-7.1.33-102.el9.x86_64.rpm
    sha:e1d0e9be326e1d37aa6dbd2271fae173491f78f0992412bd686e1a041541cdaf
  • alt-php71-gd-7.1.33-102.el9.x86_64.rpm
    sha:13aadb5a2e238c25dc85b89d62a492ec45e7994f2feda88537cf85293595a632
  • alt-php71-imap-7.1.33-102.el9.x86_64.rpm
    sha:e772369d96208d6f4d6b9ad8be2337c9fbe2deab3d81fa8b59f69e62f6cdf24d
  • alt-php71-intl-7.1.33-102.el9.x86_64.rpm
    sha:8d68b0a443e50dc56a4ae5c311e8ad49cfcec9ae95aa28caa3b5c01e87db0332
  • alt-php71-ldap-7.1.33-102.el9.x86_64.rpm
    sha:4a410bab17eac4ba90b532b67e8b207581a5bc73f3b2bc19be5179a7a45c248a
  • alt-php71-mbstring-7.1.33-102.el9.x86_64.rpm
    sha:96be3bcf33ab4ec84ebc6daf7344ff062cf568db25bc78c29c51fd402056e7a3
  • alt-php71-mcrypt-7.1.33-102.el9.x86_64.rpm
    sha:eaff6953b41e81c1b9742757018131b413f15906f2a9ea0a3a05c2af7a29c5eb
  • alt-php71-mysqlnd-7.1.33-102.el9.x86_64.rpm
    sha:f82110f4a9854444353bcb2c6d187ca7dc4b2ec0c1fdfb646f7831f2b0da34eb
  • alt-php71-odbc-7.1.33-102.el9.x86_64.rpm
    sha:7818aa7b17a04738832752327255c869055aa6a0ed077f608ace98866a54acef
  • alt-php71-opcache-7.1.33-102.el9.x86_64.rpm
    sha:b687971f5e3f1da5bef339e1b34dd278d6a7d0f99aa469961d79ece458f8f34e
  • alt-php71-pdo-7.1.33-102.el9.x86_64.rpm
    sha:f11535166f5b84c936cbfbaa34e44cb4ad0dc00e00b686de314a37bdade3967e
  • alt-php71-pgsql-7.1.33-102.el9.x86_64.rpm
    sha:5407b45f73cd5d4a946891dea1a7518742347bb4d9ab231545e71df2e67fbbd5
  • alt-php71-php-fpm-7.1.33-102.el9.x86_64.rpm
    sha:cef1d0865f24408b734e1f2e7568d5ab60c2bc645c5002e8be04e8940ca34f3d
  • alt-php71-process-7.1.33-102.el9.x86_64.rpm
    sha:eecd92d85053bb0cee930aee6442427071b9cfe1a18bd216ed95e44bc44a6e9f
  • alt-php71-pspell-7.1.33-102.el9.x86_64.rpm
    sha:a9e69e481e295e7f84b162ca5be25301939d8b3f004beb47282451217556201c
  • alt-php71-recode-7.1.33-102.el9.x86_64.rpm
    sha:30871b8c843f79e0c593b3599d43eb94a8ecb43d2ae559cab1276c3d7f116440
  • alt-php71-snmp-7.1.33-102.el9.x86_64.rpm
    sha:3aa2e90effed9f459ff2c54deeab581040bf2273bb6bff021e14e5e9a6c57927
  • alt-php71-soap-7.1.33-102.el9.x86_64.rpm
    sha:a12b5eb138140636bdd65b1a42d859813ae4dc53701992fe5aa81714b5443153
  • alt-php71-tidy-7.1.33-102.el9.x86_64.rpm
    sha:483e95fdc2a12b0f829847b485e16e4074cc88ce0ea971ed4160ad160873fe43
  • alt-php71-xml-7.1.33-102.el9.x86_64.rpm
    sha:1d5125f264205fa1f9344a3ea2356b5fc4dbbb49293f28cea34c815ab63d78a9
  • alt-php71-xmlrpc-7.1.33-102.el9.x86_64.rpm
    sha:a8ab2d898671140e2455d8a3ccf9993e89565ad4227d8d370e55a1357d8c81dd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.