[CLSA-2026:1786436816] alt-php71: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-11 08:27:09 UTC
Description:
- CVE-2026-9672: fix three defects in the bundled libgd GIF LZW decoder (ext/gd/libgd/gd_gif_in.c) - reset sd->table[1][i] instead of sd->table[1][0], stop decoding after the LZW end code, and zero-initialise LZW_STATIC_DATA in ReadImage() (backport of upstream fcd691b377d02285740744bee17c0f298be227d5) - CVE-2026-17543: fix SQL injection in ext/pgsql - php_pgsql_add_quotes() emitted E'...' while PQescapeStringConn() only doubles the quote, letting a trailing backslash break out of the literal (backport of upstream ab048bd83b578119cf81b456526d50498421d617) - CVE-2026-7260: fix phar circular symlink crash - phar_get_link_source() now follows the link chain with Floyd cycle detection instead of unbounded self-recursion, and phar_get_link_location() restores the path separator it temporarily overwrites (backport of upstream 2e0fa0a44441d74bf8cc4e1ce1c8af9cd4209f52)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-102.el10.x86_64.rpm
    sha:5b0c7e85bd38b45b774888c2df915f5b4965c624b0711d9a25a2be2c62765fe8
  • alt-php71-bcmath-7.1.33-102.el10.x86_64.rpm
    sha:7c3376ead2fd936837759775ebe8087f77f99821c53e40061873d6bfc67e3481
  • alt-php71-cli-7.1.33-102.el10.x86_64.rpm
    sha:3e1094c6f331dcfb554906d37211213cfea20c7f582452ee19b063336ba0a29c
  • alt-php71-common-7.1.33-102.el10.x86_64.rpm
    sha:4144858df0d4b90f3bee07457612e217305f699a163cef99c7d1f9a94537b167
  • alt-php71-dba-7.1.33-102.el10.x86_64.rpm
    sha:b37c6710b955c67cfd71de59cd0ad8d8391599fddbf099c071ce8c7be9145fc9
  • alt-php71-devel-7.1.33-102.el10.x86_64.rpm
    sha:fa8152ad0a2987a5569f2314bd37acda0f7a8fa16155eb04e4ef2ca715b1119b
  • alt-php71-enchant-7.1.33-102.el10.x86_64.rpm
    sha:0029e5e0d6ab84a0eb4a747c0129373b46151b7b34ec2d8d9996f7c5e9a9677f
  • alt-php71-firebird-7.1.33-102.el10.x86_64.rpm
    sha:5ed20c125d186baad2e04ed66aee1c38dd51933e851eaf924b97528389dcba55
  • alt-php71-gd-7.1.33-102.el10.x86_64.rpm
    sha:568fd01f3cd685145214dc5c7e05a6fdb22d9d7c43778b5dcd0e07c5c5e4f9ab
  • alt-php71-imap-7.1.33-102.el10.x86_64.rpm
    sha:1ceaab7aaa01185a0741ae5888e6252d7c4d882ecf106f718ccf93bc2960bb65
  • alt-php71-intl-7.1.33-102.el10.x86_64.rpm
    sha:9ef21f0f1c16c13369ed1ea5fa78b37a19ca4b2a0e45f05ca94fd01eea0e2f45
  • alt-php71-ldap-7.1.33-102.el10.x86_64.rpm
    sha:7451bba9e83603c2d3579ce612af0e391856008ff790d222dd8610a98bdc5c1d
  • alt-php71-mbstring-7.1.33-102.el10.x86_64.rpm
    sha:a6537353efb5558e16ce8468c798425c4a75ae2b4f5f4857098248cca65d4006
  • alt-php71-mcrypt-7.1.33-102.el10.x86_64.rpm
    sha:3bf4cfbbb605d2c33699562c6fcc9b7a746a61824f0dd1308896faf66e1a2716
  • alt-php71-mysqlnd-7.1.33-102.el10.x86_64.rpm
    sha:98a5e9127f42e3b1c20b3e8838339806656290accdf530ea26f4f44c7b7f4129
  • alt-php71-odbc-7.1.33-102.el10.x86_64.rpm
    sha:9797e6426584ccc7a9113677f918295779a7aa265344ad3caf7afccf5645afe9
  • alt-php71-opcache-7.1.33-102.el10.x86_64.rpm
    sha:a3bdcaf06da78855f040c78842017ec1fb449db958798db98d6976b05e392c88
  • alt-php71-pdo-7.1.33-102.el10.x86_64.rpm
    sha:db1c2d5a9594a333e3676f7d7f4dd38878231106141628f5323ea60765434b6f
  • alt-php71-pgsql-7.1.33-102.el10.x86_64.rpm
    sha:5fce3748a0baeebf0668ae9e478c9e7b4e4461cba6408381199b0be66add92ea
  • alt-php71-php-fpm-7.1.33-102.el10.x86_64.rpm
    sha:d2e53846a6f7b10e77e4d13206e9f063b2700638596420f47fe59e497171ad62
  • alt-php71-process-7.1.33-102.el10.x86_64.rpm
    sha:b7d02008f65917e66975221cd04082bb3ea3e17407ecedd95d6f3d5749561d65
  • alt-php71-pspell-7.1.33-102.el10.x86_64.rpm
    sha:aad9309cc2d76852712dc6ea21aba65cb6a16827c817548b9fc8c4e1d09bf243
  • alt-php71-recode-7.1.33-102.el10.x86_64.rpm
    sha:55a82c1ade10e5900fe255f16e38a5351bba8ad896312ddeb9b5f6354e1e3e97
  • alt-php71-snmp-7.1.33-102.el10.x86_64.rpm
    sha:68a57769589bc9247f94c49c00d406ef7c9d5b8f1934d10a869dc1d54a0c9244
  • alt-php71-soap-7.1.33-102.el10.x86_64.rpm
    sha:465a2a45d7838a9b20c44d98976e9c0188e8f91834982d15253442bd0a7c7461
  • alt-php71-tidy-7.1.33-102.el10.x86_64.rpm
    sha:4e8906ae610492b30478565493fa3359dce010e9d4d9b35565e92234a462056c
  • alt-php71-xml-7.1.33-102.el10.x86_64.rpm
    sha:2f45094803ff8831497bb08c25f2eb1fcef01909a1f8ba686550a47602aa69a5
  • alt-php71-xmlrpc-7.1.33-102.el10.x86_64.rpm
    sha:2d21337ddf2b7f0de58a90295ba60189fd28a8143f88dd04c3e9ded1b8c42cb1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.