Release date:
2026-08-11 09:16:45 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder - the table reset cleared
sd->table[1][0] instead of sd->table[1][i] so stale suffixes leaked between
images, LWZReadByte_() kept decoding after the LZW end code when the trailing
data block count was 0, and ReadImage() left LZW_STATIC_DATA uninitialised
- CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped
PQescapeStringConn() output in an E'...' literal, which lets a trailing
backslash escape the closing quote while standard_conforming_strings is on.
Emit a plain '...' literal instead
- CVE-2026-7260: unbounded recursion in phar_get_link_source() on a circular
symlink chain (GHSA-vc5h-9ppw-p5f3); replaced by a Floyd cycle-detection walk,
including the phar_get_link_location() path-separator restore the walk needs
Updated packages:
-
alt-php72-7.2.34-86.el10.x86_64.rpm
sha:02038fd7b5653e05386f7e9c3a336d736398f55fadafb1aa598a438e338aee6f
-
alt-php72-bcmath-7.2.34-86.el10.x86_64.rpm
sha:5d28cf887b7944ce554e1dc9eef59d5699a562362ce132f94fec8ff6a0c0ae6a
-
alt-php72-cli-7.2.34-86.el10.x86_64.rpm
sha:b80085deb59d865a78762da0ab4eb201c49f1ad0ddc96a829eb9fc420972adf7
-
alt-php72-common-7.2.34-86.el10.x86_64.rpm
sha:b98935ff72525cfed616f144edc062072271e76b8aa04a3a0811dd1480cc5b93
-
alt-php72-dba-7.2.34-86.el10.x86_64.rpm
sha:e335b8c1e6ccad30851a574b83200fd79a7f6203206ef1ff3f860c8243876a76
-
alt-php72-devel-7.2.34-86.el10.x86_64.rpm
sha:0d9aaccbac688e8863bc49f4a6e8164a3bbfc51ea7237ca2409fcd0627fbb10a
-
alt-php72-enchant-7.2.34-86.el10.x86_64.rpm
sha:6f4d52bd289f9459bcc86a1ce897b5fe714c08b8ff3127140d965d62eaf170b3
-
alt-php72-firebird-7.2.34-86.el10.x86_64.rpm
sha:a9cabc4ebabce500e3b2239a1c243cd0f41f29be8fecdd6cdb28573ca8621f05
-
alt-php72-gd-7.2.34-86.el10.x86_64.rpm
sha:40e9d1a100341bced6f7d2640c499669ab9bc9759d03ae57e8b2b28942556a11
-
alt-php72-imap-7.2.34-86.el10.x86_64.rpm
sha:e27ef65f09dd45e0bf5c4a44e696f7c73320ce113be2d449ed133eee938d4798
-
alt-php72-intl-7.2.34-86.el10.x86_64.rpm
sha:021613655e5adc59f25105a519061f3e3d41b5219f72b247038e239769163c42
-
alt-php72-ldap-7.2.34-86.el10.x86_64.rpm
sha:09a447d9d21e97f33bad8f5dbfee1cde9f49f8a3d3eafcade03b1f7bca9462a8
-
alt-php72-mbstring-7.2.34-86.el10.x86_64.rpm
sha:99397c23806e31682d163a81488d0fde96fb44345c06103e1a11839783f576dc
-
alt-php72-mysqlnd-7.2.34-86.el10.x86_64.rpm
sha:43cdecde68e4dd615fac68a63ab2b29cb984c4abec920f11c9cb19fa41c5bb80
-
alt-php72-odbc-7.2.34-86.el10.x86_64.rpm
sha:7fc39a95218beda182680353adc33f01602446031d1ab5e536ac4d7ea69caef4
-
alt-php72-opcache-7.2.34-86.el10.x86_64.rpm
sha:e929ce6e1684561a4f97b07a6f1e33f8a5f4a11946dd889dfeada5d0f3773fc7
-
alt-php72-pdo-7.2.34-86.el10.x86_64.rpm
sha:55028213566d12aed7e11c796161984ef92dfdec55e25f8e2aa99dee61000fe4
-
alt-php72-pgsql-7.2.34-86.el10.x86_64.rpm
sha:d1621a845a68f9f45d076a521d01355a430809d4c0540d8c431b733b4fb94396
-
alt-php72-php-fpm-7.2.34-86.el10.x86_64.rpm
sha:4c48461e501dab0c85e52a02f858f17b567f2097a7155f5b5e8fce1989dfca67
-
alt-php72-process-7.2.34-86.el10.x86_64.rpm
sha:45bf5b60e1fcb03484b7a321d8122eaa605d7f1a7bfb223657423aa5e7d55e0f
-
alt-php72-pspell-7.2.34-86.el10.x86_64.rpm
sha:f46e9c7b0e1da1056bf4f4b0cb4f08f2805993b40a3b0f407e256ae47a0e59cc
-
alt-php72-recode-7.2.34-86.el10.x86_64.rpm
sha:1177f0777a865c42165a6a51d9fdeeb587ba436cac94a0c3855b96a5e5540489
-
alt-php72-snmp-7.2.34-86.el10.x86_64.rpm
sha:c5593632d5cdbb4855ca947ec6fa863983a0587f449672f197ac8de7f071004a
-
alt-php72-soap-7.2.34-86.el10.x86_64.rpm
sha:2c61d551904dcebc61cc0f613d7e2c1fa94d334b3d4effe7834b878205c3cf9d
-
alt-php72-sodium-7.2.34-86.el10.x86_64.rpm
sha:b0ea17a0da86baa0c074a0823513f8c79ff7b78ae389612b719087fd8d9d9921
-
alt-php72-tidy-7.2.34-86.el10.x86_64.rpm
sha:204c0927b9dc0cc8c94cc1ff2d3876a72a3bd0a996093357eeb2dcff71cb297e
-
alt-php72-xml-7.2.34-86.el10.x86_64.rpm
sha:f9013bea3450bde9a8d2e838bb8292c2897c83255eb773a662441cdc78dfaa62
-
alt-php72-xmlrpc-7.2.34-86.el10.x86_64.rpm
sha:f75f6a378a9796fdd838569818bb0ed850fd734b3e0f3c215374342b4c9cce80
-
alt-php72-zts-7.2.34-86.el10.x86_64.rpm
sha:81c92fef750963c87c73597bba47044d5fb74569bb67cba8ed819b214844d044
-
alt-php72-zts-devel-7.2.34-86.el10.x86_64.rpm
sha:b4c32e917adc66f2ad1a3a0f01d94a79b9cab1335f3c22d7bfe1f55815056271
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.