Release date:
2026-08-11 09:42:11 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder read an uninitialised code
table (sd->table[1][0] instead of sd->table[1][i] in the reset loop, plus
an uninitialised LZW_STATIC_DATA on the stack) and kept decoding past an
end-of-stream code
- CVE-2026-17543: pg_insert()/pg_update()/pg_select()/pg_delete() emitted
values escaped by PQescapeStringConn() inside an E'...' constant, so a
trailing backslash broke out of the literal (SQL injection); emit a plain
'...' constant instead
- CVE-2026-7260: phar_get_link_source() followed tar symlink chains by
unbounded recursion, so a phar with circular symlinks exhausted the C
stack; walk the chain iteratively with Floyd cycle detection
Updated packages:
-
alt-php73-7.3.33-72.el10.x86_64.rpm
sha:091be299ec13bb8a5bdaee65205716dc806cc74d0679c9be7072f0a6c7899f0d
-
alt-php73-bcmath-7.3.33-72.el10.x86_64.rpm
sha:c3c316904ff5477ea0c310bb5f89cc621a850abc76a0ecee9f0550fc8322bce6
-
alt-php73-cli-7.3.33-72.el10.x86_64.rpm
sha:4968803b36886724d97b97f0230acc00b4ce21c2815eaa9ac11cec0f97c74a46
-
alt-php73-common-7.3.33-72.el10.x86_64.rpm
sha:6f00170dbe508734025bf3f1b4b66b6d336682dea4858f12669bc82588580849
-
alt-php73-dba-7.3.33-72.el10.x86_64.rpm
sha:ed809571bc253aad6b5a57fe8e3b8fd19b353a81bc8ff5fd4ce21f69029aff66
-
alt-php73-devel-7.3.33-72.el10.x86_64.rpm
sha:a396fbe5d91b623a751d06b29c357d1503609eed9ef4c587cac915afea180af2
-
alt-php73-enchant-7.3.33-72.el10.x86_64.rpm
sha:6ad3c3c5fa51ce264cc8e9b9d4e7cc338df53468dc804af7f623ac9481bb8093
-
alt-php73-firebird-7.3.33-72.el10.x86_64.rpm
sha:c93b674514eaeb1361136d60db785ba2da96ce6342aa1da184d6ad8e54fefac4
-
alt-php73-gd-7.3.33-72.el10.x86_64.rpm
sha:84e9eeac812657fa23a429ea6b0b13edb7a235b609777d174f7560c345ea9895
-
alt-php73-imap-7.3.33-72.el10.x86_64.rpm
sha:b4618dfb203a833a7d8c36f87ca971a592f8a5e6da9a5fe6f2ab251eba963feb
-
alt-php73-intl-7.3.33-72.el10.x86_64.rpm
sha:7c8185a8dbb44bd778e9a5bfd9a68c60b78c1cd736add7a03fae107e7ea60646
-
alt-php73-ldap-7.3.33-72.el10.x86_64.rpm
sha:ba4d3f6c2f63190ab8a029cf1020ea772dba71c05b0fb468642efe83d7182384
-
alt-php73-mbstring-7.3.33-72.el10.x86_64.rpm
sha:60ec10fd38df1c70e09c3ff6f04a951742cfa7599e3752c0494c88421b0ec05a
-
alt-php73-mysqlnd-7.3.33-72.el10.x86_64.rpm
sha:3378fe80d02a5e70ba937f6eacf9e84e2da13b0c4242ce704eb3d4597f3bbc5d
-
alt-php73-odbc-7.3.33-72.el10.x86_64.rpm
sha:e69bb0fd72d8c5eef4a8c5811bb210067a36f4415247e8a8f74944be42fa44f5
-
alt-php73-opcache-7.3.33-72.el10.x86_64.rpm
sha:af19322668b691792c5a9bce0fbf7e206a3e7259e137f47aa8ba08f3e73043b6
-
alt-php73-pdo-7.3.33-72.el10.x86_64.rpm
sha:8b936b57fe039a97a84668caeb28c91235159c08497a2fbd862201c6f19834d6
-
alt-php73-pgsql-7.3.33-72.el10.x86_64.rpm
sha:817652e6b35510f4a2e64c6edc6da42dc1f8c8d6fa812b4e5723846523c4596a
-
alt-php73-php-fpm-7.3.33-72.el10.x86_64.rpm
sha:7fac5d85e03422534aa646d7b194d9255bfd4f3447188f5a0500ccfe29ba8d6d
-
alt-php73-process-7.3.33-72.el10.x86_64.rpm
sha:c02e47f28ae4db5fe4c59fd13266a983fd9e001eee802e49689e7ec1d23cc426
-
alt-php73-pspell-7.3.33-72.el10.x86_64.rpm
sha:da1139c655f8cce8f904c781450a40cb9014b39f50f824a930a6b082b66b0341
-
alt-php73-recode-7.3.33-72.el10.x86_64.rpm
sha:0236a812c16f4d56c0249db492c0399e6dd12e843846111bcba8e3f2d50f96fc
-
alt-php73-snmp-7.3.33-72.el10.x86_64.rpm
sha:87355e209e262ec1b612fd45726f05f837f03d22c940a8e63cbcbfa7e0a1fb8d
-
alt-php73-soap-7.3.33-72.el10.x86_64.rpm
sha:9df2a625160bd83fe160b82724f623d54f59dadd2ca29ad56a146c22f93dae47
-
alt-php73-sodium-7.3.33-72.el10.x86_64.rpm
sha:141d84580e97e3fcc77a5d24c512434f849fe9a59e4fe3d63e235500a514b230
-
alt-php73-tidy-7.3.33-72.el10.x86_64.rpm
sha:27c7784747235524867d1b93b01f3a6715cd9dd22ad56efcd48c2aa5b9fb1732
-
alt-php73-xml-7.3.33-72.el10.x86_64.rpm
sha:717772cceb8e16ebe2882aabf30045d4514552db6ac48e30ccf1052a131217d4
-
alt-php73-xmlrpc-7.3.33-72.el10.x86_64.rpm
sha:3e64c77218878b28a366526863a141e67206ef03ca33432548c827bca590b5c2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
