[CLSA-2026:1786624109] alt-php71: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-13 12:28:42 UTC
Description:
- CVE-2026-9672: fix three defects in the bundled libgd GIF LZW decoder (ext/gd/libgd/gd_gif_in.c) - reset sd->table[1][i] instead of sd->table[1][0], stop decoding after the LZW end code, and zero-initialise LZW_STATIC_DATA in ReadImage() (backport of upstream fcd691b377d02285740744bee17c0f298be227d5) - CVE-2026-17543: fix SQL injection in ext/pgsql - php_pgsql_add_quotes() emitted E'...' while PQescapeStringConn() only doubles the quote, letting a trailing backslash break out of the literal (backport of upstream ab048bd83b578119cf81b456526d50498421d617) - CVE-2026-7260: fix phar circular symlink crash - phar_get_link_source() now follows the link chain with Floyd cycle detection instead of unbounded self-recursion, and phar_get_link_location() restores the path separator it temporarily overwrites (backport of upstream 2e0fa0a44441d74bf8cc4e1ce1c8af9cd4209f52)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-102.el6.x86_64.rpm
    sha:0a7193712b9149f2e9136bf2c92ea1cbde6feb99efa3467dc6c5dca1aa468560
  • alt-php71-bcmath-7.1.33-102.el6.x86_64.rpm
    sha:63121f8280c620414fe8ec7322b834bc1727de1353303415b950fe22d6adf910
  • alt-php71-cli-7.1.33-102.el6.x86_64.rpm
    sha:fae91ee6e792085c8bb99a8212a453b8ba331e2ea59e61ae4824ce448d83efa8
  • alt-php71-common-7.1.33-102.el6.x86_64.rpm
    sha:01e461d5702bf2b2ca353e6007ba90dec85cb29b6d3ad38f24219ba1d7203aea
  • alt-php71-dba-7.1.33-102.el6.x86_64.rpm
    sha:d4a826cbddca34d76306b5ef724e03d798d94a7ff05b7ce7d4152c4d2eac9cc3
  • alt-php71-devel-7.1.33-102.el6.x86_64.rpm
    sha:3283f8315551620dddc3c29e019576ea944e429d8e5c8a6db4a336b7d3e4a0c1
  • alt-php71-enchant-7.1.33-102.el6.x86_64.rpm
    sha:180e0490cbe84324495bfd6af156d2c35a4ba19bc16911de5ad1a830bd6b3cfa
  • alt-php71-firebird-7.1.33-102.el6.x86_64.rpm
    sha:fd17d8d8f0da905baed00a970f4d5a6a5d7990875104c2e6463e26be81d52d89
  • alt-php71-gd-7.1.33-102.el6.x86_64.rpm
    sha:ffe3830fda8ac90441f505c72bf3d45e5c1a096c664449733dd854f99c884bab
  • alt-php71-imap-7.1.33-102.el6.x86_64.rpm
    sha:56a1678ddb262dcae24876e65057f6b912f8576f3fcb195660bcfee871ac5c6f
  • alt-php71-intl-7.1.33-102.el6.x86_64.rpm
    sha:12af2204e038fb9e4043a5c1458a859fa9e3ece474557c4a80eabebd7cfd3d12
  • alt-php71-ldap-7.1.33-102.el6.x86_64.rpm
    sha:256685e1a354eec6953a8a66b80a07bece477a423c940663ba260032f23c18ad
  • alt-php71-mbstring-7.1.33-102.el6.x86_64.rpm
    sha:99df58d517b7622b6b4d34a72f3f26d5735875d64eb797c37447d493544f7af8
  • alt-php71-mcrypt-7.1.33-102.el6.x86_64.rpm
    sha:c502d16bfcb5eca7d202eab688257a67aa72a779d3953b28b2f387206d45b496
  • alt-php71-mysqlnd-7.1.33-102.el6.x86_64.rpm
    sha:accbb4112a85c5157ff370c362fcd4ee02fe55aa86c11732b7e2fea256063e07
  • alt-php71-odbc-7.1.33-102.el6.x86_64.rpm
    sha:d6fbf77878619ac1f86b4dbf5902963efa690ee04a3ad4280f9d78db28f05c88
  • alt-php71-opcache-7.1.33-102.el6.x86_64.rpm
    sha:6a5892e3bebc0e814f49bb87be686f8251ea3ce201a1720e739f20bd38cd4879
  • alt-php71-pdo-7.1.33-102.el6.x86_64.rpm
    sha:4e5d92c85f7e47b3b8bea4977e0a6e764f54f18f3de278a9e73a783a3c689df8
  • alt-php71-pgsql-7.1.33-102.el6.x86_64.rpm
    sha:18072e39837237697399b5a5a5f87cd22b40d2fc582dd7a2524bfb8c326912a1
  • alt-php71-php-fpm-7.1.33-102.el6.x86_64.rpm
    sha:f97fb9e2cec27423da064eb5e305c1636d371b31622c7a810c24a92a197144a9
  • alt-php71-process-7.1.33-102.el6.x86_64.rpm
    sha:ae0b8d5390516d2dd459c4b35d864bded21995146111066a413f2eeee28278b7
  • alt-php71-pspell-7.1.33-102.el6.x86_64.rpm
    sha:83ab52ecff4d23a0c797830fcc8582bd3e5040971c28f87e80ba0a94f33e0db5
  • alt-php71-recode-7.1.33-102.el6.x86_64.rpm
    sha:daf6f94a01d98d5330a6dbaea185b7bb7ccda696410c10db51ddec118e694973
  • alt-php71-snmp-7.1.33-102.el6.x86_64.rpm
    sha:b9934a0ce6d85eab867a1e6e2f60ae41e5ac0d59da2a0b870d895bb88a04895a
  • alt-php71-soap-7.1.33-102.el6.x86_64.rpm
    sha:9d259955ed5770abc5d6239d06c02026cfeb910db87fc6bae03f38a424e8e2e0
  • alt-php71-tidy-7.1.33-102.el6.x86_64.rpm
    sha:d6014d2aeba73ff006e58a780c0ec443ebd1c21d49f2cd673f578e826cc846ff
  • alt-php71-xml-7.1.33-102.el6.x86_64.rpm
    sha:400f40826e7808cea0c81a5f40fce752a432dc97e8dcfc2b177f6e34d815b54c
  • alt-php71-xmlrpc-7.1.33-102.el6.x86_64.rpm
    sha:c3e59ec4bfa98afc650883bece59b140908997f9589c380b92c1de956fc31b90
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.